Citrix sign on its office building in Fort Lauderdale, Florida, USA, an American cloud computing and virtualization technology company.

(Adobe Stock)

CISA warns organizations to patch 2 critical Citrix NetScaler RCEs

Steve ZurierSeptember 28, 2026

Federal agencies are told to make the patches by this Wednesday

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Exposure management
From Data to Decisions to Action: Why Exposure Management’s Next Chapter Runs Through Validation
Black Hat
Cyber recovery plans lag behind AI, ransomware threats

PODCASTS

Phishing
Measuring the Value of SecOps; BH Interviews with Fortra, Helmet, Above, & Keeper – Christopher Crowley, Josh Davies, Kaushik Shanadi, Tricia Howard, Darren Guccione – ESW #478
Vulnerability Management
AI butterfly effects, Chuds, CISA, FBI, FreeBSD, Ghost Accounts, Pervs, Josh Marpet – SWN #619
IoT
AI Will Save Us, or Not? – PSW #945
Leadership
Balancing AI Benefits and Risks as Your Next CISO Could be Artificial Intelligence – Evan McHenry – BSW #466
Vulnerability Management
WWIII, Debt, JFK, CISA, SUSE, OpenAI, Google, DORA, Aaran Leyland, and More – SWN #618

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

Island’s Michael Leland: Owning the teamwork

SC StaffSeptember 28, 2026

The importance of giving responsibility to -- and taking responsibility for -- your team.

Digital login interface with data network connections and abstract code

Was the Australia health portal incident a misconfiguration error?

Steve ZurierSeptember 25, 2026

Questions emerge over whether a reported AI hack was actually a basic government portal misconfiguration.

Security Operations

Kiteworks warns customers to shut down servers due to possible imminent attack

Laura FrenchSeptember 25, 2026

Kiteworks’ CISO cited “credible threat intelligence from law enforcement” for the urgent alert.

Vulnerability Management

CISA publishes framework for improving CVE program as vulnerability counts rise

Laura FrenchSeptember 25, 2026

The framework outlines four key areas of focus for the CVE program’s “Quality Era.”

(Adobe Stock)

Critical 9.8 JetBrains TeamCity RCE exploited by ransomware, says CISA

Steve ZurierSeptember 24, 2026

Ransomware groups exploit a critical TeamCity flaw, putting software supply chains at risk.

Critical Infrastructure Security

MemTensor npm, PyPI packages compromised with cross-platform credential stealer

Laura FrenchSeptember 24, 2026

A Go binary called sckit was added to four malicious releases, targeting developer secrets.

The FBI seal is seen on its headquarters at the J. Edgar Hoover FBI building in Washington.

FBI probes ShinyHunters claims of massive agent data theft

Steve ZurierSeptember 23, 2026

ShinyHunters claims it stole 2 TB of sensitive data on thousands of current and former FBI agents.

First ‘autonomous AI C2 implant’ uses panel of models to vote on next task

Laura FrenchSeptember 23, 2026

CLOSEDQUORUM is designed to use DeepSeek, Qwen, Mistral and Gemini to make post-exploitation decisions.

Events