Application securityConnectWise investigating reports of unauthorized access to third-party extensionsSteve ZurierNovember 12, 2026Attackers may be exploiting ScreenConnect extensions to execute malicious commands on endpoints.
Vulnerability ManagementCisco BroadWorks flaw added to CISA’s exploited vulnerabilities listSteve ZurierNovember 11, 2026CISA confirms active exploitation of a Cisco BroadWorks flaw exposing sensitive telecom files.
Critical Infrastructure SecurityFrance blames Iran for attacks on more than 700 grocery storesSteve ZurierNovember 10, 2026Iran-linked cyberattacks on French refrigeration systems raise alarms over critical infrastructure.
IdentitySonicWall MFA bypass flaw added to CISA exploited vulnerabilities listSteve ZurierNovember 9, 2026CISA flags an exploited SonicWall SonicOS flaw that lets attackers bypass MFA on SSL VPNs.
Critical Infrastructure SecurityFBI, CISA warn of cyberattacks targeting refrigeration systemsSteve ZurierNovember 6, 2026FBI and CISA urge refrigeration operators to secure systems amid suspected cyberattacks.
Vulnerability ManagementBug affecting multiple Apple products added to CISA exploited listSteve ZurierNovember 5, 2026CISA flags an actively exploited Apple flaw linked to Russian cyberespionage campaigns.
Application securityWordPress Core bug added to CISA’s exploited vulnerabilities listSteve ZurierNovember 4, 2026CISA flags actively exploited WordPress Core flaw allowing unauthenticated code execution during updates.
Critical Infrastructure SecuritySuspected cyberattacks target US military, European supermarket freezersSteve ZurierNovember 3, 2026Suspected cyberattacks on U.S. military and European freezers raise concerns about food supply security.
Application securityOver 1,000 GitLab servers exposed to exploited critical RCE flawSteve ZurierNovember 2, 2026Security experts warn unpatched GitLab servers pose serious software supply chain risks.
Application securityDrupal Commerce Core access bypass flaw exploited in attacksSteve ZurierOctober 30, 2026Attackers exploit critical Drupal Commerce Core flaw to bypass access controls and manipulate orders.
The exposure window: How to manage AI risk when agents fail at machine speedBarr MosesNovember 12, 2026
The EchoLeak flaw taught us that all models are vulnerable to prompt injectionItay Ravia November 11, 2026
