(Adobe Stock)

(Adobe Stock)

Node2Shell flaw in Brotli added to CISA exploited vulnerabilities list

Steve ZurierOctober 28, 2026

An exploited Brotli bug can crash an app, leak sensitive data, or hand an attacker code execution on a server.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Endpoint/Device Security
The shadow AI epidemic: Uncovering hidden AI agents and components on the endpoint
Container security
Moving images: How a runtime bill of materials provides total dependency visibility

PODCASTS

Leadership
CyberSN Jobs Report as CIOs and CISOs are Unaccountable and Unprepared for AI – BSW #471
Vulnerability Management
Agents, Train Robberies, Jazz, Microsoft, Elvis Gyrates, Aaran Leyland, and More – SWN #628
Application security
Securing Modern Financial Systems in the Age of AI – Rashid Feroze – ASW #406
Network Security
Building a parallel Internet, security buzzwords that should be retired, and the news – Barrett Lyon – ESW #482
Vulnerability Management
Tor, PhP2Shell, Deepfakes, eMudhra, LiteLLM, Meta, Josh Marpet, and More – SWN #627

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

OpenAI’s top security person Michael Aiello delivers the Keynote this morning at the Cyber Innovation Conference in Washington, DC. (Photo by Steve Zurier, SC Media)

OpenAI calls for industry to raise its cyber defenses

Steve ZurierOctober 27, 2026

The frontier model’s top security person explains OpenAI’s four-pronged security strategy.

Vulnerability Management

PHP2Shell exploitation confirmed, but mass attacks remain elusive

Steve ZurierOctober 26, 2026

PHP2Shell exploits are emerging, but widespread attacks remain unconfirmed as scanning surges.

AI Agent concept with glowing neon interface icons for data cloud settings and sharing representing artificial intelligence and digital network

AI pentesting tool Artex used in recent ConnectWise compromise

Steve ZurierOctober 23, 2026

China-linked hackers used agentic AI to accelerate attacks on Microsoft cloud tenants via ConnectWise.

Patch/Configuration Management

PHP2Shell attacks surge worldwide as governments rush to patch

Steve ZurierOctober 22, 2026

PHP2Shell attacks spread worldwide as governments rush to patch and legacy systems remain exposed.

Credit: Adobe Stock

Application security

CISA advises orgs to patch PHP2Shell bugs immediately

Steve ZurierOctober 21, 2026

CISA urges immediate PHP2Shell patching as attackers target critical flaws in widely used PHP code.

AI benefits/risks

Deepfakes are becoming a security control problem, not just a media problem

SC Media Editorial Intelligence, reviewed by HabibullahOctober 21, 2026

A sign on top of a building reads "Siemens" in blue letters.

Siemens Software Center flaw exploited in ClickFix DLL-sideloading attack

Steve ZurierOctober 20, 2026

Malware lets attackers gain the Siemens app with full privileges into industrial enterprises.

(Adobe Stock)

Attackers compromise Microsoft 365 credential via ConnectWise Cloud Backup

Steve ZurierOctober 19, 2026

Stolen ConnectWise app credential enables unauthorized access to hundreds of Microsoft 365 tenants.

Events