Three Cities, Three Keynotes, Zero Tickets Closed
The summer conference circuit is dense, but the patch queue doesn't move on its own. Here's what actually buys down cybersecurity risk this quarter.
June 2026
Who’s Actually Reading Your Container Scan Results?
Three scanners and an LLM won't fix the real cybersecurity gap behind this week's VPN and ERP attacks. Here's where to look instead.
21 Months In Prison. The Credentials Still Worked.
An ex-IT admin got 21 months in prison because his old credentials still worked. The npm 12 change tells the same story. Here is what to fix this week.
Your Login Stack Was Theirs For Ten Years
A China-linked group lived in PAM and sshd for a decade. Here's what your cybersecurity program should actually do about it. Read on.
Your AI Vendor Got A Phone Call At 5:21 PM
Anthropic killed two flagship AI models with one hour's notice. Your cybersecurity stack should already plan for the vendor-yank scenario. Read on.
Nobody Read The Auth Code For Ten Years
A 10-year phpBB auth bypass, Google security layoffs, and a $400M Coupang fine prove cybersecurity attention is the real control. See what to fix this quarter.
Who Vetted The Build Script You Just Ran?
400 Arch packages hijacked, an Oracle ERP zero-day, a $47M genetic-data settlement. The cybersecurity lesson is the same. See what to fix this week.
Three Bugs Stacked. Your Self-Hosted Agent Is Theirs.
A LangGraph RCE chain and Unit 42's skill-integrity research expose the AI agent supply chain. See what to inventory and isolate now.
What If The Breach Notice Is The Attack?
Fake breach notices, a lost drive, and a court ruling on AI errors all hit the same week. See how to harden the truth channels around your business.
The Takedown Made Headlines. The School Still Closed.
A $380M ransomware laundering ring went down this week. A British school still sent 1,428 kids home. Here's the cybersecurity gap defenders own.