Crafted Packets Bypass ISE Auth Before Your Firewall Logs
Cisco ISE is taking unauthenticated crafted requests in the wild. Your cybersecurity stack still trusts that box. See what to cut first.
A Judge Now Owns the People-Search Empire
Radaris lost its domains in court. The dossiers didn't. See what your cybersecurity team should freeze this week.
The Agent Already Took the Data
Spain filed an agentic data theft. Your cybersecurity stack still starts too late. Check the login trail.
Hijacked Session Spread Worms to 100 Repos
A hijacked AI coding session spread Shai-Hulud through 100 repos. See what cybersecurity teams should lock down before the next suggestion.
Unauthenticated File Upload Put PHP Shells on 6,000 Shops
Unauthenticated WooCommerce uploads dropped PHP shells on 6,000 shops. Your cybersecurity plugin inventory is the real control. Audit it today.
One Confirmed Leak. 7.5 Million Records.
CenterPoint confirmed a 7.5 million-record leak after the dump. Snapshot audits fail as cybersecurity proof. Check your export path today.
Teachers Forced Microsoft’s Classroom Privacy Deal
Teachers got Microsoft to lock school AI. Your tenant still trains on tickets. Read the cybersecurity cuts to make now.
MQTT Keepalives Hid Three Years of Access
BambooToken used MQTT keepalives as C2 for years. See how to treat brokers as command servers and cut dwell. Check your allows.
Your Mail Gateway Was Always a Root Host
Cisco's mail-gateway root RCE and LiteSpeed's tenant bug show cybersecurity still treats appliances as filters. Audit the box.
One Cask Bug. Root Across the Mac Fleet
Homebrew's unsigned cask sudo path and a one-click Tencent IME bug show cybersecurity gaps on helper software. Audit brew and IMEs now.
Your Confidential VM Believed the Old Write
DDRop starves DRAM writes and fools TDX and SEV. Your cybersecurity isolation pitch just met a circuit. Check the real threat model.
Google Killed Hover and You Still Train It
Google hid search URLs and cloud roles still lie in the logs. Treat cybersecurity as behavior, not labels. Fix the hunts this week.
Trusted Access Emptied the Customer Files
Stolen logins and a government-looking inbox beat cybersecurity theater for months. Check which customer sessions are still open.
Your Daily Brief Changed Nothing
Daily cybersecurity briefings won't shrink your edge. Turn Monday intel into blocks before scanners reuse it. Grab the ritual.
Five Centers. You Still Own Every Outage.
NSA's five mission centers will not shorten your outage. See what the cybersecurity reorg actually changes for intel, detection, and IR. Read the checklist.
Don’t Budget the Pause They Asked For
Amodei wants a cybersecurity pause. Attackers already rented the mail pipes. See what to harden before the swarm clock runs out.
Linux Rootkit on F5 BIG-IP APM Hid the Access Path
A Linux rootkit on F5 BIG-IP APM sat under standard cybersecurity monitoring. See how to contain the access path and rebuild TMOS.
One Kit Now Chains Chrome and Windows for Multiple Spies
BlueMoon now chains Chrome and Windows zero-days for multiple spies. See how cybersecurity teams hunt the shared kit. Check your detections.
CVE-2026-42016 Puts Artifact Authz on the KEV Clock
CISA put CVE-2026-42016 and four peers on the cybersecurity KEV clock. Authz bugs in your admin planes are exploited now. Check owners today.
Attackers Published First. You Paid Longer.
CISA wants less spin as cybersecurity outages climb. Hedged notices and AI alert noise stretch downtime. Audit your IR clock.
Please Stop Pretending the VPN Is Internal
Critical VPN RCE is still a cybersecurity problem because your concentrator is public. Steal this week's hardening list before the next advisory.
GitLab’s Commits API Became a File Server
GitLab's CVSS 10 file-read hit cybersecurity teams within a day of disclosure. See which secrets to rotate first.
Who Still Grades Phishing by the Click?
Click rates still run most cybersecurity awareness programs. This week's research, plus a million AI lures, says score the password. Fix the metric.
Twenty Agencies Faced a Model Operator
Russia-linked spies used Claude against 20+ agencies. See what model-paced ops mean for your cybersecurity program, then close the gaps.
The ID Vendor Was Production
IDScan's 153 million license dump is a cybersecurity problem you outsourced. Inventory the copies before the next vendor call.
