(Adobe Stock Images)

GitLab patches 10.0 flaw in its CE and EE products

Steve ZurierOctober 13, 2026

GitLab patches critical CVSS 10.0 RCE flaw as experts warn of software supply chain risks.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Risk Assessments/Management
The AI you can’t see: Bringing third-party shadow AI into the risk picture
MDR
Transforming MDR: How AI challenges and strengthens protection services

PODCASTS

Vulnerability Management
Claude Visa, Yandex, Danfoss, Bricks, Purgatorius, Muse, Xandr, Grindr, Aaran Leyland – SWN #624
Vulnerability Management
What’s Not Found in AppSec? – ASW #404
Supply chain
Exposure Management: Stop Measuring Controls. Start Measuring Risk. – Heather Ceylan – CSP #229
Data Security
Data Security in the AI Era, Don’t Let AI Ruin your Presentation, and the Weekly News – Hadar Krasner – ESW #480
Vulnerability Management
Airline Zoom Calls,Pix, Windows, TP-Link, AgentCorruption, OSS Scanner, Josh Marpet – SWN #623

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

(Adobe Stock)

Application security

Critical Bricksforge WordPress flaw exploited in attacks

Steve ZurierOctober 12, 2026

Attackers exploit critical Bricksforge WordPress flaw to execute code without authentication.

(SonicWall)

Vulnerability Management

SonicWall SSRF bug rated 10.0 exploited in SMA1000 Appliance Work Place

Steve ZurierOctober 9, 2026

Attackers target critical SonicWall SMA1000 flaw as security experts urge immediate patching.

WiFi router

Network Security

Four US states allege TP-Link defrauded customers, seek damages

Steve ZurierOctober 8, 2026

Four states sue TP-Link over alleged security misrepresentations and ties to China.

Fortinet, Inc. is an American cybersecurity company it develops, sells security products like Firewalls, end point security in Frisco, Texas.

FortiBleed campaign still attacking Fortinet devices, US agencies warn

Steve ZurierOctober 7, 2026

FBI warns FortiBleed attackers remain active, turning stolen credentials into persistent access.

The homepage of Atlassian website is displayed on a PC.

Critical Atlassian flaw exposes files across eight products

Steve ZurierOctober 7, 2026

Unauthenticated attackers could steal credentials and gain access to CI/CD systems.

Citrix sign on its office building in Fort Lauderdale, Florida, USA, an American cloud computing and virtualization technology company.

Network Security

New Citrix Netscaler zero-day exploited just days after recent attacks

Steve ZurierOctober 5, 2026

Third exploited NetScaler flaw in a week signals attackers are moving faster than patch cycles.

Active Directory

When identity becomes the outage

SC Editorial Intelligence , expert reviewedOctober 5, 2026

(Adobe Stock)

Vulnerability Management

Fortinet FortiMail bug exploited in the wild, added to CISA KEV list

Steve ZurierOctober 2, 2026

Exploited FortiMail flaw lets attackers turn email security gateways into persistent footholds.

Events