(Credit: Rafael Henrique – stock.adobe.com)

(Credit: Rafael Henrique – stock.adobe.com)

Over 1,000 GitLab servers exposed to exploited critical RCE flaw

Steve ZurierNovember 2, 2026

Security experts warn unpatched GitLab servers pose serious software supply chain risks.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Incident Response
After the breach: Uncovering the full scope of the attack
Endpoint/Device Security
The shadow AI epidemic: Uncovering hidden AI agents and components on the endpoint

PODCASTS

Vulnerability Management
More Vulns and More Guesswork from Less Data – Jeremiah Grossman – ASW #407
Vulnerability Management
Shifting Cyber Turtles with Casey Ellis, the Vibe Check, and the News – Casey Ellis – ESW #483
Vulnerability Management
Mrfoofoo, Binance, Polymarket, Silent Train, robosurance, privacy, and Josh Marpet – SWN #629
Vulnerability Management
Vulnpocalypse Continues Until Defense Improves – PSW #950
Leadership
CyberSN Jobs Report as CIOs and CISOs are Unaccountable and Unprepared for AI – BSW #471

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

Drupal website. Drupal is a free and open-source web content management system (CMS) written in PHP.

Application security

Drupal Commerce Core access bypass flaw exploited in attacks

Steve ZurierOctober 30, 2026

Attackers exploit critical Drupal Commerce Core flaw to bypass access controls and manipulate orders.

China Bans Cyber Attacks: Examining Internet Security with Chinese Flag and Binary Data Through a Magnifying Glass Concept

Critical Infrastructure Security

Cisco SD-WAN Catalyst Controller attacks linked to Volt Typhoon’s Silent Train network

Steve ZurierOctober 29, 2026

China-linked hackers exploit Cisco SD-WAN flaw, with infrastructure tied to Volt Typhoon.

(Adobe Stock)

Vulnerability Management

Node2Shell flaw in Brotli added to CISA exploited vulnerabilities list

Steve ZurierOctober 28, 2026

An exploited Brotli bug can crash an app, leak sensitive data, or hand an attacker code execution on a server.

OpenAI’s top security person Michael Aiello delivers the Keynote this morning at the Cyber Innovation Conference in Washington, DC. (Photo by Steve Zurier, SC Media)

OpenAI calls for industry to raise its cyber defenses

Steve ZurierOctober 27, 2026

The frontier model’s top security person explains OpenAI’s four-pronged security strategy.

Vulnerability Management

PHP2Shell exploitation confirmed, but mass attacks remain elusive

Steve ZurierOctober 26, 2026

PHP2Shell exploits are emerging, but widespread attacks remain unconfirmed as scanning surges.

AI Agent concept with glowing neon interface icons for data cloud settings and sharing representing artificial intelligence and digital network

AI pentesting tool Artex used in recent ConnectWise compromise

Steve ZurierOctober 23, 2026

China-linked hackers used agentic AI to accelerate attacks on Microsoft cloud tenants via ConnectWise.

Patch/Configuration Management

PHP2Shell attacks surge worldwide as governments rush to patch

Steve ZurierOctober 22, 2026

PHP2Shell attacks spread worldwide as governments rush to patch and legacy systems remain exposed.

Credit: Adobe Stock

Application security

CISA advises orgs to patch PHP2Shell bugs immediately

Steve ZurierOctober 21, 2026

CISA urges immediate PHP2Shell patching as attackers target critical flaws in widely used PHP code.

Events