(Adobe Stock) New CISA-hosted VINCE-NT system revealed for coordinated vulnerability disclosureLaura FrenchSeptember 18, 2026CISA says the new system is more streamlined and secure, enabling faster coordination.
What the FBI’s new offensive cyber strategy means to the private sectorJames Turgal September 17, 2026
Hastily deployed agentic security is not the answer to enterprise cyber threatsLee Rossey September 16, 2026
US Treasury asks financial institutions to file scam center reports under new keywordSC StaffSeptember 17, 2026
From autonomous agent to trusted worker: Building identity and accountability for AI agentsPaul WagenseilSeptember 17, 2026
Preparing for AI-enabled incidents: Helping business leaders understand enterprise riskKelley DamoreSeptember 16, 2026
Security Staff Acquisition & DevelopmentCongress pledges mental health support after Cyber Command suicidesSteve ZurierSeptember 18, 2026Lawmakers seek more mental health resources after five Cyber Command personnel died by suicide.
RansomwareSettra ransomware group uses MeshAgent RMM in recent attacksLaura FrenchSeptember 18, 2026The nascent threat actor has claimed 93 victims since June 2026.
Vulnerability ManagementCisco patches 10.0 ISE bug exploited in the wildSteve ZurierSeptember 17, 2026Actively exploited Cisco ISE flaw could give attackers a path to expand network access.
Network SecurityFlaws in The Events Calendar WordPress plugin enable unauthenticated RCELaura FrenchSeptember 17, 2026Both flaws can be exploited by leaving an anonymous comment on an event page.
Vulnerability ManagementConnectWise ScreenConnect bug exploited in the wild, CISA saysSteve ZurierSeptember 16, 2026Experts warn teams to patch right away to prevent a potential ransomware incident.
Threat IntelligenceHBO Max Reddit account compromised, used in ‘PasteSwitch’ ClickFix attacksLaura FrenchSeptember 16, 2026Malicious Reddit advertisements led to macOS and Windows infostealer downloads.
RansomwarePatched VMware vCenter bug targeted in ransomware campaignsSteve ZurierSeptember 15, 2026Ransomware groups exploit a critical VMware vCenter bug just seven weeks after patch released.
PhishingMicrosoft warns of cloud storage attacks, financial fraud scams targeting customersLaura FrenchSeptember 15, 2026Both campaigns use social engineering to access accounts or secure fraudulent transactions.