PhishingMicrosoft warns of cloud storage attacks, financial fraud scams targeting customersLaura FrenchSeptember 15, 2026Both campaigns use social engineering to access accounts or secure fraudulent transactions.
AI/MLTrump pushes back on Anthropic CEO’s call for an AI slowdownSteve ZurierSeptember 14, 2026Trump rejects calls to slow frontier AI as security experts debate the risks and need for guardrails.
Vulnerability ManagementMax severity GitLab path traversal flaw under active reconnaissanceLaura FrenchSeptember 11, 2026The flaw could enable sensitive files to be read with just an HTTP request.
Vulnerability ManagementCheck Point patches two critical VPN gateway bugsSteve ZurierSeptember 11, 2026Check Point fixed two 9.8-severity VPN flaws before any known exploitation in the wild.
AI/MLAnthropic finds 4th real-world attack by Claude agent, details models’ ‘biased reasoning’Laura FrenchSeptember 11, 2026Mythos 5 was highlighted as being especially prone to believing the real world was a simulation.
RansomwareCISA: WatchGuard Firebox bug exploited in ransomware campaignsSteve ZurierSeptember 10, 2026Ransomware gangs are exploiting a WatchGuard Firebox flaw that CISA flagged nine months ago.
AI/MLPaperCut MF/NG flaws attacked with hundreds of AI agentsLaura FrenchSeptember 10, 2026The AI-assisted campaign enabled attackers to gain domain admin in as little as 5 minutes.
Network SecurityF5 BIG-IP malware hides web shells in memory to evade detectionSteve ZurierSeptember 9, 2026Memory-resident malware targeting F5 BIG-IP appliances can evade file-based security defenses.
IdentityBigBear 2.0 phishing campaign compromises MFA-protected Microsoft accountsLaura FrenchSeptember 9, 2026Researchers discovered more than 3,300 unique victims across 461 organizations.
Vulnerability ManagementN-able patches critical N-central RCE flaw amid exploit concernsSteve ZurierSeptember 8, 2026N-able patched a critical N-central RCE flaw amid concerns about potential active exploitation.
AI has outpaced the patching clock – here’s what the industry needs to do Nathan SmolenskiSeptember 14, 2026