N-able patches critical N-central RCE flaw amid exploit concerns
N-able patched a critical N-central RCE flaw amid concerns about potential active exploitation.
SC Media
20 articles
What Authenticity Failure Costs the Business
6 ways teams can leverage zero-trust to manage AI agents
By leveraging zero-trust, teams can address the blast radius problem with AI agents.
What AI Validation Actually Tests
Security Conversations on AI, Agents, and Emerging Threats from Black Hat 2026 - Michael Leland, Sean Murphy, Idan Plotnik, Ido Geffen - ASW #399
Shadow AI Epidemic: Uncovering Agents on the Endpoint, British Library Breach, & News - Amit Assaraf - ESW #475
Ping YOUniverse: The next stage of human authentication
Ping Identity says its combination of biometrics and verifiable documentation is the next step in access management.
Wireguard, Chrome, RMMS, Sonicwall, Microsoft, Sumerian VPNS, Harvard, Josh Marpet... - SWN #613
New Linux toolkit found in trojanized HAProxy targeting South Korean organizations
The implant, identified by Rapid7 Labs with medium confidence as originating from North Korean state-sponsored actors, targets entities in South Korea's auto...
PostGREShell vulnerability allows server takeover
The vulnerability stems from missing authorization in PostgreSQL's logical decoding feature.
Upwind Security raises $300 million in Series C funding
Upwind Security offers a platform that automatically maps cloud assets and refreshes data every 30 seconds to account for frequent configuration changes.
Coder platform targeted by attackers delivering malicious Terraform modules
The attack occurred between 07:35 UTC and 21:45 UTC on Monday, August 31.
Cisco addresses critical vulnerabilities in Nexus 9000 switches and IOS XR
The critical Nexus vulnerability (CVE-2026-20212) allows unauthenticated attackers to execute code with root privileges by binding to an unrestricted IP addr...
Thomson Reuters court software breach exposes sensitive data in Canada and US
The incident, detected on June 30, impacted the C-Track Canada system, exposing files from three Ontario courts.
Abliteration.ai launches service for uncensored AI models
Abliteration.ai aims to enable offensive cyber operations, red-teaming, and agent testing that other models refuse.
Plex urges immediate updates for media server and desktop clients due to security vulnerabilities
While specific CVE identifiers have not yet been assigned, Plex has directly emailed users, emphasizing the critical need to update to the latest versions to...
House bill aims to grant financial regulators oversight of tech vendors
The bill addresses a perceived gap in regulatory power, as the NCUA's temporary authority to oversee third-party vendors has lapsed, leaving financial system...
Critical vulnerability in Elementor Pro exploited for RCE attacks
The exploit targets a flaw in how Elementor Pro forms handle file uploads.
Baylor Genetics confirms cyberattack impacting 2.8 million patients and employees
The cyberattack, which occurred around June 15, resulted in the theft of patient data including names, dates of birth, medical testing information, laborator...
ASCII smuggling challenges email phishing filters, Microsoft warns
Invisible Unicode tag characters often used for AI prompt injection have appeared in high-volume phishing attacks.