(SonicWall)

(SonicWall)

SonicWall MFA bypass flaw added to CISA exploited vulnerabilities list

Steve ZurierNovember 9, 2026

CISA flags an exploited SonicWall SonicOS flaw that lets attackers bypass MFA on SSL VPNs.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Exposure management
Racing against the clock: How to stand up to emerging agentic AI threats
Data Security
Back to the beginning: Why AI’s impact on data security makes the endpoint the battlefield once again

PODCASTS

Application security
Human Expertise Will Always Be The Core Of AI Cybersecurity – Andrew Wesie – ASW #408
Vulnerability Management
Assessing risk at the speed of change, coordinated disclosure, and the news – Danielle Russell – ESW #484
Vulnerability Management
AI hates us all, Binance, OpenSSH, Apple, WordPress, DNS, Scams, Josh Marpet and more – SWN #631
Vulnerability Management
“That’s Not Supposed to Happen” – PSW #951
Leadership
It’s The Trickery While Empowering Employees and Redesigning Work for AI – Frank Riccardi – BSW #472

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

The homepage of the FBI.

Critical Infrastructure Security

FBI, CISA warn of cyberattacks targeting refrigeration systems

Steve ZurierNovember 6, 2026

FBI and CISA urge refrigeration operators to secure systems amid suspected cyberattacks.

Vulnerability Management

Bug affecting multiple Apple products added to CISA exploited list

Steve ZurierNovember 5, 2026

CISA flags an actively exploited Apple flaw linked to Russian cyberespionage campaigns.

(Adobe Stock)

Application security

WordPress Core bug added to CISA’s exploited vulnerabilities list

Steve ZurierNovember 4, 2026

CISA flags actively exploited WordPress Core flaw allowing unauthenticated code execution during updates.

An aerial view of the Pentagon, Washington, D.C., May 15, 2023. (DoD photo by U.S. Air Force Staff Sgt. John Wright)

Critical Infrastructure Security

Suspected cyberattacks target US military, European supermarket freezers

Steve ZurierNovember 3, 2026

Suspected cyberattacks on U.S. military and European freezers raise concerns about food supply security.

(Credit: Rafael Henrique – stock.adobe.com)

Application security

Over 1,000 GitLab servers exposed to exploited critical RCE flaw

Steve ZurierNovember 2, 2026

Security experts warn unpatched GitLab servers pose serious software supply chain risks.

Drupal website. Drupal is a free and open-source web content management system (CMS) written in PHP.

Application security

Drupal Commerce Core access bypass flaw exploited in attacks

Steve ZurierOctober 30, 2026

Attackers exploit critical Drupal Commerce Core flaw to bypass access controls and manipulate orders.

China Bans Cyber Attacks: Examining Internet Security with Chinese Flag and Binary Data Through a Magnifying Glass Concept

Critical Infrastructure Security

Cisco SD-WAN Catalyst Controller attacks linked to Volt Typhoon’s Silent Train network

Steve ZurierOctober 29, 2026

China-linked hackers exploit Cisco SD-WAN flaw, with infrastructure tied to Volt Typhoon.

(Adobe Stock)

Vulnerability Management

Node2Shell flaw in Brotli added to CISA exploited vulnerabilities list

Steve ZurierOctober 28, 2026

An exploited Brotli bug can crash an app, leak sensitive data, or hand an attacker code execution on a server.

Events