(Adobe Stock) ConnectWise investigating reports of unauthorized access to third-party extensionsSteve ZurierNovember 12, 2026Attackers may be exploiting ScreenConnect extensions to execute malicious commands on endpoints.
The exposure window: How to manage AI risk when agents fail at machine speedBarr MosesNovember 12, 2026
The EchoLeak flaw taught us that all models are vulnerable to prompt injectionItay Ravia November 11, 2026
The refrigeration attacks in Europe are a prelude to attacks on US critical infrastructureJames Turgal November 10, 2026
eMudhra revokes additional intermediate certificates following security investigationSC StaffNovember 12, 2026
Chinese government uses AI platform to monitor diaspora and influence industry leadersSC StaffNovember 12, 2026
Racing against the clock: How to stand up to emerging agentic AI threatsPaul WagenseilNovember 9, 2026
Back to the beginning: Why AI’s impact on data security makes the endpoint the battlefield once againPaul WagenseilNovember 9, 2026
OWASP Global AppSec: Cybersecurity industry overdue for a ‘market correction’Paul WagenseilNovember 6, 2026
Vulnerability ManagementCisco BroadWorks flaw added to CISA’s exploited vulnerabilities listSteve ZurierNovember 11, 2026CISA confirms active exploitation of a Cisco BroadWorks flaw exposing sensitive telecom files.
Critical Infrastructure SecurityFrance blames Iran for attacks on more than 700 grocery storesSteve ZurierNovember 10, 2026Iran-linked cyberattacks on French refrigeration systems raise alarms over critical infrastructure.
IdentitySonicWall MFA bypass flaw added to CISA exploited vulnerabilities listSteve ZurierNovember 9, 2026CISA flags an exploited SonicWall SonicOS flaw that lets attackers bypass MFA on SSL VPNs.
Critical Infrastructure SecurityFBI, CISA warn of cyberattacks targeting refrigeration systemsSteve ZurierNovember 6, 2026FBI and CISA urge refrigeration operators to secure systems amid suspected cyberattacks.
Vulnerability ManagementBug affecting multiple Apple products added to CISA exploited listSteve ZurierNovember 5, 2026CISA flags an actively exploited Apple flaw linked to Russian cyberespionage campaigns.
Application securityWordPress Core bug added to CISA’s exploited vulnerabilities listSteve ZurierNovember 4, 2026CISA flags actively exploited WordPress Core flaw allowing unauthenticated code execution during updates.
Critical Infrastructure SecuritySuspected cyberattacks target US military, European supermarket freezersSteve ZurierNovember 3, 2026Suspected cyberattacks on U.S. military and European freezers raise concerns about food supply security.
Application securityOver 1,000 GitLab servers exposed to exploited critical RCE flawSteve ZurierNovember 2, 2026Security experts warn unpatched GitLab servers pose serious software supply chain risks.