Critical Infrastructure SecurityRussia’s FSB attacks critical infrastructure, says 12 Western nationsSteve ZurierJuly 13, 2026Russian hackers target outdated Cisco routers in decade-long espionage campaign.
IdentityOkta warns of vishing scheme that extorts dataSteve ZurierJuly 10, 2026Attackers pose as IT and tell employees to enroll an MS passkey, but the bad guys register their own key and take over the user.
TrainingTwo-year online college ‘Campus’ now offers cybersecurity trackSteve ZurierJuly 9, 2026Online program aims to build a pipeline of qualified candidates to fill positions that require much-needed AI skills.
Vulnerability ManagementCISA adds ColdFusion, Langflow, and Joomla bugs to known exploited vulnerabilities listSteve ZurierJuly 8, 2026Three of the four flaws added to CISA's KEV list were critical.
Cloud SecurityLinux bug dormant for 16 years can cause a VM escapeSteve ZurierJuly 7, 2026A single compromised hypervisor can grant root privileges over the server.
Supply chainNorth Korean PolinRider supply chain attack targets 108 unique reposSteve ZurierJuly 6, 2026Socket says the campaign remains active and more attacks are likely.
Vulnerability ManagementCISA adds SharePoint flaw to known exploited vulnerabilities listSteve ZurierJuly 2, 2026SharePoint offers bad actors a roadmap into how an organization operates.
IdentityMicrosoft Azure’s CLI target of automated password spray attacksSteve ZurierJuly 1, 2026Huntress researchers saw 78 user accounts compromised across 64 organizations.
Vulnerability ManagementCritical Oracle E-Business Suite bug actively exploitedSteve ZurierJune 30, 2026Critical Oracle EBS flaw now exploited, prompting urgent patching guidance.
Network SecurityF5 releases out-of-band patches for two critical NGINX bugsSteve ZurierJune 18, 2026F5 issued urgent patches for two critical NGINX flaws that could enable DoS or code execution.
