Credit: Adobe Stock

Credit: Adobe Stock

CISA advises orgs to patch PHP2Shell bugs immediately

Steve ZurierOctober 21, 2026

CISA urges immediate PHP2Shell patching as attackers target critical flaws in widely used PHP code.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Penetration Testing
In continuous operation: How Simpson Strong-Tie safely AI red-teams AI-powered applications
MDR
How to get enterprise-grade security without an enterprise-sized team

PODCASTS

Leadership
Minimum Viable Company as Security’s Inflection Point & Human Breaking Point Collide – Kriss Stephen – BSW #470
Vulnerability Management
Klingons, Stop and Shop, OvHCloud, Microsoft, Plex2Shell, ReactOS, and Aaran Leyland – SWN #626
Application security
Standardizing Mobile Defense: Inside the OWASP Mobile App Security Project v2 – Ryan Lloyd, Jan Seredynski – ASW #405
Breach
Securing AI on the Endpoint, Anthropic Dreams of AI Replicants, and the News – Michael Jenkins – ESW #481
Vulnerability Management
Mr. Sparkle, Burger King, Pwnscape, Linux, Cisco, GitHub, Microsoft, Josh Marpet… – SWN #625

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

AI benefits/risks

Deepfakes are becoming a security control problem, not just a media problem

SC Media Editorial Intelligence, reviewed by HabibullahOctober 21, 2026

A sign on top of a building reads "Siemens" in blue letters.

Siemens Software Center flaw exploited in ClickFix DLL-sideloading attack

Steve ZurierOctober 20, 2026

Malware lets attackers gain the Siemens app with full privileges into industrial enterprises.

(Adobe Stock)

Attackers compromise Microsoft 365 credential via ConnectWise Cloud Backup

Steve ZurierOctober 19, 2026

Stolen ConnectWise app credential enables unauthorized access to hundreds of Microsoft 365 tenants.

(Credit: monticellllo – stock.adobe.com)

Vulnerability Management

BeyondTrust zero-day exploited by China-linked group Armory Castle

Steve ZurierOctober 16, 2026

Chinese group tied to at least three other major exploits over the past few weeks.

(Adobe Stock)

Cisco warns critical Secure Email Gateway bug exploited in the wild

Steve ZurierOctober 15, 2026

Cisco confirms active exploitation of critical email gateway flaw, warns attackers can erase evidence.

(Adobe Stock)

Vulnerability Management

CISA adds chained Ivanti Connect Secure bug to its exploited list

Steve ZurierOctober 14, 2026

CISA orders urgent patching of exploited Ivanti VPN flaw as attackers chain three vulnerabilities.

An equity graph as a symbol of a good or bad market day. Slide background for showcasing day trading.

‘The Flip’: Retired Lt. Gen. Mary O’Brien warns the biggest data threat is now coming in, not going out

SC StaffOctober 14, 2026

Former Air Force cyber leader warns AI-generated misinformation threatens executive decision-making.

Active Directory

Why Partner Access Outlives the Partnership

SC Media Editorial Intelligence, reviewed by Dara GibsonOctober 14, 2026

Events