ServiceNow Leaked Customer Data Through An Unauthenticated API Endpoint
ServiceNow's unauthenticated API and Exchange's Ghost-Sender spoof prove the cybersecurity gap is trust, not patch speed. See where to look first.
June 2026
WinRAR Got Patched, Your Endpoints Didn’t
A WinRAR CVE patched eleven months ago is still owning Ukrainian government desks. Time to inventory the freeware nobody's tracking.
Three Days To Patch. Three Hours To Exploit.
CISA gave feds 3 days to patch Check Point's VPN flaw. Anthropic's AI builds N-day exploits in hours. Here's what defenders should actually do now.
The Teams DM From “IT” Came From An External Tenant
Teams federation defaults turned "Hi, this is IT" into a cybersecurity disaster. Here's the configuration and detection work that actually shuts it down.
One Character In The Kernel. Root On Every Container.
A one-character Linux kernel patch turned into a public root exploit on June 8. Here's what defenders should do before the weekend.
Why Does Your VPN Still Need No Password In 2026?
Two critical pre-auth edge bugs hit this week. Here's why patching isn't the cybersecurity control you think, and what to do about it.
UNC3753 Called Your Help Desk. Then It Walked In.
UNC3753 paired vishing with physical office intrusions to extort dozens of US firms. Here's what your cybersecurity playbook is missing this week.
Microsoft Just Shipped An LLM Into Your Privileged Shell Pane
Microsoft's Intelligent Terminal puts an LLM beside every privileged shell. A cybersecurity look at the new endpoint risk and what to lock down today.
An AI Startup Raised $2.1M. The Attackers Just Dialed In.
Silent Ransom Group hit law firms by phone in hours while a router botnet quietly grew. The cybersecurity money is funding the wrong layer. See where.
One Poisoned Memory Outlasts Every Patch You Push
Memory poisoning leaves the payload in your AI agent after the attacker is long gone. Here's the cybersecurity playbook to spot it. Start this quarter.