The Hidden Bug Era Ended
AI blew up hidden bugs while Sangoma Switchvox is already exploited. See how cybersecurity teams cut exposure before vendors catch up.
September 2026
One QR Scan. A Stolen Login Session.
QR codes in Teams already steal sessions your cybersecurity stack never sees. Lock down untrusted images before October. Check your gap.
Play Was the Install Button
StreamRat used Meta and TikTok ads to put a banking Trojan in front of 570,000 people. Audit how your cybersecurity program treats ads.
ASCII Smuggling Just Hit Production
ASCII smuggling is hiding phishing from your cybersecurity stack. See what to inspect before the next deal email lands.
You Didn’t Pay. The Admin Keys Still Worked
Exposed admin keys beat ransom theater: MAG's 8.8M dump and court-platform breaches show what cybersecurity teams should fix first. Steal the checklist.
The Student Never Opened the Message
A Serbian student's iPhone got Pegasus with zero taps. See what that means for cybersecurity programs that still treat phones as perks. Check your MDM list.
22,000 Exchange Servers Still Honor Replayed Auth After August 11
22,000 Exchange servers still take replayed auth. Prove the patch, isolate OWA, and hunt sessions. Your cybersecurity queue starts here.
Gig Laptops Turn Client Access Into Free Infrastructure
A malware crew hit 80,000 freelance PCs your cybersecurity program never inventories. Lock contractor access before the next campaign. Read how.
The Clone Came With a Shell Command
Hostile git configs can make coding agents run attacker code. See the cybersecurity gap on developer laptops, then lock the clone down.
Unpatched File Portals Export Your Most Sensitive Stores
Old ownCloud bugs emptied a nuclear agency's files. Your cybersecurity program still skips catalogs. Check your versions before someone else does.