(Adobe Stock)

(Adobe Stock)

IPMI bug in BMCs found after 22 years, exposes 24,000-plus servers

Steve ZurierJuly 28, 2026

Decades-old IPMI bug leaves thousands of internet-facing servers exposed.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
AI/ML
AI plans are being approved. Recovery plans are not
AI/ML
Phishing the agent: Why identity controls are essential to secure and manage AIs

PODCASTS

Vulnerability Management
Deep Fakes, Molten Salt, PLCS, Checkpoint, Hugging Face, CENTOS, Josh Marpet and More – SWN #602
Application security
Inside the OWASP Agent Security Regression Harness Project – Mert Satilmaz – ASW #393
Vulnerability Management
Exploring AI Network Protocols; Vulnerability Truths and Guarantees; and the News – O’Shea Bowens, Jeremiah Grossman – ESW #469
Vulnerability Management
Rogue AI Vehicle Porn, OpenAI, Nudes, Clop, Patches, Oracle, Palo Alto, Aaran Leyland – SWN #601
IoT
Fixing Vulns Is Harder Than Finding Them – PSW #936

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Perspectives

In Brief

More Resources

A firewall with visible cracks, under assault by malware, symbolized by warning signs and skulls, representing a critical security breach.

Vulnerability Management

CheckPoint authentication bypass bug exploited, added to CISA list

Steve ZurierJuly 27, 2026

CISA orders rapid patching as Check Point auth bypass faces active attacks.

Rep. Don Bacon, R-Neb.

Critical Infrastructure Security

Rep. Bacon warns CISA cuts weaken U.S. cyber defenses

SC StaffJuly 24, 2026

House Armed Services Committee member urges faster cyber investments as China, Russia threats grow.

Iran Flag Digital Binary Code Cyberpunk Technology Concept

Critical Infrastructure Security

US warns of Iran-linked attacks on critical infrastructure

Steve ZurierJuly 24, 2026

Iran-linked hackers target Siemens, Schneider, Rockwell OT.

Futuristic Virus Cell Digital Microscope Malware Anatomy Cybersecurity Cyber Pathogen Detection Neutralization Antivirus Defense Technology Dark Blue

Application security

AI is overwhelming patch management. Here’s how teams adapt

Steve ZurierJuly 23, 2026

AI is overwhelming patch teams, forcing a shift to smarter, automated remediation.

(Credit: Koshiro K – stock.adobe.com)

Hugging Face ‘attacker’ revealed to be OpenAI agents that escaped testing sandbox

Laura FrenchJuly 22, 2026

OpenAI said GPT-5.6 Sol and a pre-release model exploited vulnerabilities to “cheat” on ExploitGym.

Microsoft SharePoint app seen in App Store on the screen of ipad and blurred finger pointing at it.

SharePoint vulnerability steals machine keys; fourth recent exploit

Steve ZurierJuly 22, 2026

New SharePoint flaw exploited as attackers steal machine keys for lasting access.

Application security

JADEPUFFER agentic ransomware returns, targets AI assets with ENCFORGE payload

Laura FrenchJuly 22, 2026

The agent abused the victim’s Docker daemon to access and encrypt AI-related files.

(Adobe Stock)

Qilin exploits Palo Alto Networks GlobalProtect VPN firewalls

Steve ZurierJuly 21, 2026

Qilin exploited a patched Palo Alto VPN flaw, highlighting the cost of delayed patching.

Events