(Adobe Stock)

Patched VMware vCenter bug targeted in ransomware campaigns

Steve ZurierSeptember 15, 2026

Ransomware groups exploit a critical VMware vCenter bug just seven weeks after patch released.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Exposure management
Total AI awareness: Gaining full visibility of the AI attack surface
Identity
Ping YOUniverse: How to classify and manage AI agents

PODCASTS

Vulnerability Management
RoboGators, HBOMAX, Microsoft, DAS, Horsebot 3000, Aaran Leyland does AI, and More – SWN #616
Application security
The AI Threat Multiplier: Securing Mobile Apps in the Automated Era – Ryan Lloyd, Jason Cortlund – ASW #400
Vulnerability Management
Beyond the CVE Count: The Real State of Vulnerability Management – Charles Loring – CSP #228
Privacy
Safely exploiting vulnerabilities at scale, TVs attack privacy, and the news. – Snehal Antani – ESW #476
AI/ML
9/11 at 25, OfferLoader, Gemini CLI, Liquid, 10% Doom, Josh Marpet, and More – SWN #615

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

Microsoft warns of cloud storage attacks, financial fraud scams targeting customers

Laura FrenchSeptember 15, 2026

Both campaigns use social engineering to access accounts or secure fraudulent transactions.

(Adobe Stock)

Trump pushes back on Anthropic CEO’s call for an AI slowdown

Steve ZurierSeptember 14, 2026

Trump rejects calls to slow frontier AI as security experts debate the risks and need for guardrails.

(Credit: Rafael Henrique – stock.adobe.com)

Vulnerability Management

Max severity GitLab path traversal flaw under active reconnaissance

Laura FrenchSeptember 11, 2026

The flaw could enable sensitive files to be read with just an HTTP request.

Digital vpn security shield with data transfer and lock

Vulnerability Management

Check Point patches two critical VPN gateway bugs

Steve ZurierSeptember 11, 2026

Check Point fixed two 9.8-severity VPN flaws before any known exploitation in the wild.

(Credit: Mojahid Mottakin – stock.adobe.com)

Anthropic finds 4th real-world attack by Claude agent, details models’ ‘biased reasoning’

Laura FrenchSeptember 11, 2026

Mythos 5 was highlighted as being especially prone to believing the real world was a simulation.

Ransomware

CISA: WatchGuard Firebox bug exploited in ransomware campaigns

Steve ZurierSeptember 10, 2026

Ransomware gangs are exploiting a WatchGuard Firebox flaw that CISA flagged nine months ago.

3D rendering of an AI agentic workflow automation software interface with connected nodes and data triggers.

PaperCut MF/NG flaws attacked with hundreds of AI agents

Laura FrenchSeptember 10, 2026

The AI-assisted campaign enabled attackers to gain domain admin in as little as 5 minutes.

Digital warning signs: A digital landscape, with warning signs on the screen, which depicts an alert or error.

Network Security

F5 BIG-IP malware hides web shells in memory to evade detection

Steve ZurierSeptember 9, 2026

Memory-resident malware targeting F5 BIG-IP appliances can evade file-based security defenses.

Events