(Credit: Timon – stock.adobe.com)

(Credit: Timon – stock.adobe.com)

CISA shares postmortem of GitHub credential leak

Laura FrenchJuly 10, 2026

CISA credentials and code were uploaded to a public repository on a contractor’s personal GitHub account in May.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
AI/ML
Stop trying to ‘lock down’ your AI: Why rigid guardrails are a gift to hackers
Identity
Seeing the unseen: Closing AI identity blind spots

PODCASTS

Vulnerability Management
Borg, GitLost, ColdFusion, GodDamn, GhostApproval, OWA, Epaphroditus, Josh Marpet,.. – SWN #597
IoT
AI Is Annoying & IoT Devices Still Get Hacked – PSW #934
Leadership
Why AI Just Broke Traditional IT Security as Leaders Clash Over AI’s Value and Hiring – Matt Quinn – BSW #455
Vulnerability Management
Dune References, FAT, Claude, ZhiPu, PolinRider, RentaBot, Sony, Aaran Leyland & More – SWN #596
Application security
Defense-in-depth strategies for securing mobile applications – Ryan Lloyd – ASW #390

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Perspectives

In Brief

More Resources

Social engineering cyber threat — growing human hacking attack concept for security awareness article, card on black keyboard

Okta warns of vishing scheme that extorts data

Steve ZurierJuly 10, 2026

Attackers pose as IT and tell employees to enroll an MS passkey, but the bad guys register their own key and take over the user.

‘GodDamn’ ransomware deploys PoisonX driver to kill EDR

Laura FrenchJuly 10, 2026

GodDamn, a rebrand of Beast and Monster ransomware, leverages AnyDesk for remote access.

Skill development and AI education concept, hands using mouse and keyboard with icons for brain gears, graduation cap, book and presentation chart, upskilling workforce

Two-year online college ‘Campus’ now offers cybersecurity track

Steve ZurierJuly 9, 2026

Online program aims to build a pipeline of qualified candidates to fill positions that require much-needed AI skills.

‘GhostApproval’ technique leads AI coding tools to alter files outside of sandbox

Laura FrenchJuly 9, 2026

The technique abuses symlinks to escape the intended workspace and weaken human-in-the-loop protections.

Vulnerability Management

CISA adds ColdFusion, Langflow, and Joomla bugs to known exploited vulnerabilities list

Steve ZurierJuly 8, 2026

Three of the four flaws added to CISA's KEV list were critical.

Rep. Josh Harder

Critical Infrastructure Security

Rep. Josh Harder: US must build more housing, infrastructure

SC StaffJuly 8, 2026

At ICIT event, California congressman urges faster housing, infrastructure to cut costs.

(Credit: Photo Agency – stock.adobe.com)

‘GitLost’ prompt injection leaks private repos via GitHub Agentic Workflows

Laura FrenchJuly 8, 2026

An issue opened on a public repository can lead the agent to disclose private details.

Holographic visualization of a multi-cloud environment showcasing hybrid cloud solutions

Linux bug dormant for 16 years can cause a VM escape

Steve ZurierJuly 7, 2026

A single compromised hypervisor can grant root privileges over the server.

Events