Vulnerability ManagementPaperCut issues emergency patches for actively exploited critical vulnerabilityLaura FrenchAugust 28, 2026Two flaws in the print management software could enable unauthenticated RCE.
AI/ML1,200 OpenAI agents colluded to cheat evaluations in lead-up to Hugging Face attackLaura FrenchAugust 28, 2026OpenAI and more than 100 other organizations are now calling for urgent collective action on cyber defense.
Critical Infrastructure SecurityUS denies access to China-linked group behind hacking federal agenciesSteve ZurierAugust 27, 2026DOJ and FBI seized China-linked cyber platforms used to target U.S. agencies and infrastructure.
AI/MLShadow AI surges as 80% of employee AI tools evade IT oversightLaura FrenchAugust 27, 2026Reco’s The State of Agent Security 2026 report highlights shadow AI, MCP risks and AI vulnerability trends.
Critical Infrastructure SecurityOver 100 US water utilities had cyberattacks in July, says CISASteve ZurierAugust 26, 2026More than 100 water systems faced attacks in July as CISA urges utilities to reduce OT exposure.
Application securityMobile banking trojans expand capabilities; 66% now allow full device takeoverLaura FrenchAugust 26, 2026Banking trojans have evolved to include remote control and ransomware capabilities.
Vulnerability ManagementCISA adds Oracle WebLogic bug to its list of exploited vulnerabilitiesSteve ZurierAugust 25, 2026Experts say exploiting WebLogic middleware gives attackers access to an enterprise's core business apps.
MalwareCodex ClickFix installation lure spreads suspected AMOS infostealerLaura FrenchAugust 25, 2026The attack uses iframes embedded in Google Sites to deliver malicious content from a trusted domain.
IdentityMicrosoft says Entra ID identity software not exploited, revises CVESteve ZurierAugust 24, 2026While the urgency has changed, security pros say teams should still review Entra ID logs for anything suspicious before the patch.
Vulnerability ManagementCISA adds Zimbra Collaboration Suite bug to exploited vulnerabilities listSteve ZurierAugust 24, 2026Experts warn that it’s the fifth time Zimbra made the KEV this year.
