(Adobe Stock) Attackers compromise Microsoft 365 credential via ConnectWise Cloud BackupSteve ZurierOctober 19, 2026Stolen ConnectWise app credential enables unauthorized access to hundreds of Microsoft 365 tenants.
AI is making scams more convincing. Here are 10 ways to protect yourselfHeather CeylanOctober 15, 2026
Fake WatchGuard website steals VPN credentials with legitimate software downloadSC StaffOctober 19, 2026
Changing the game: How AI forces organizations to revisit assumptions about recovery and resiliencePaul WagenseilOctober 6, 2026
Lean and mean: How the concept of a minimum viable company speeds recovery and boosts resiliencePaul WagenseilOctober 2, 2026
Vulnerability ManagementBeyondTrust zero-day exploited by China-linked group Armory CastleSteve ZurierOctober 16, 2026Chinese group tied to at least three other major exploits over the past few weeks.
Email securityCisco warns critical Secure Email Gateway bug exploited in the wildSteve ZurierOctober 15, 2026Cisco confirms active exploitation of critical email gateway flaw, warns attackers can erase evidence.
Vulnerability ManagementCISA adds chained Ivanti Connect Secure bug to its exploited listSteve ZurierOctober 14, 2026CISA orders urgent patching of exploited Ivanti VPN flaw as attackers chain three vulnerabilities.
Leadership‘The Flip’: Retired Lt. Gen. Mary O’Brien warns the biggest data threat is now coming in, not going outSC StaffOctober 14, 2026Former Air Force cyber leader warns AI-generated misinformation threatens executive decision-making.
Active DirectoryWhy Partner Access Outlives the PartnershipSC Media Editorial Intelligence, reviewed by Dara GibsonOctober 14, 2026
Application securityAI agents breach production systems, spread malware in major exploitsOWASP GenAI Security Project Team October 14, 2026AI agents breached production systems, stole credentials and spread malware through software supply chains.
Vulnerability ManagementGitLab patches 10.0 flaw in its CE and EE productsSteve ZurierOctober 13, 2026GitLab patches critical CVSS 10.0 RCE flaw as experts warn of software supply chain risks.
Application securityCritical Bricksforge WordPress flaw exploited in attacksSteve ZurierOctober 12, 2026Attackers exploit critical Bricksforge WordPress flaw to execute code without authentication.