Vulnerability Management

Interview with Evan Powell - Generative and agentic AI are improving cyberattacks faster than they're improving cyber defenses. Offensive folks have been having the most luck with AI so far, which is further eroding any advantage defenders might have had. Evan Powell joins us to share some ideas on how defenders can get some benefits from AI as we...

Sidhe, GreyVibe, Claude, Lightwell, Eclipse, Kimsuky, Obscure Belief Systems, Josh Marpet, and More on this episode of the Security Weekly News.

The flaws, disclosed by Token Security, did not require malware or insider access, only a free Zapier account.

This week we have a technical segment focused on Linux! Paul released a script that helps you get a handle on Linux supply chain security, and new features allow you to assess the state of Secure Boot on your Linux systems (that also use MS certificates, ironically). The script is in his Git repo: https://github.com/pasadoorian/Linux_Hacks. In th...

The flaw, tracked as CVE-2026-48710, arises from the framework's handling of malformed Host headers.

CISA warns of exploited LiteSpeed flaw putting shared hosting at risk.

They're Listening, Drupal, TTE, KEV, Mythos, Megalodon, Boris and Natasha, MFA, Pope Leo, Aaran Leyland, and More on the Security Weekly News.

Drupal SQL injection flaw CVE-2026-9082 added to CISA KEV as active attacks target sites.