(Credit: Rafael Henrique – stock.adobe.com)

(Credit: Rafael Henrique – stock.adobe.com)

Max severity GitLab path traversal flaw under active reconnaissance

Laura FrenchSeptember 11, 2026

The flaw could enable sensitive files to be read with just an HTTP request.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Exposure management
Total AI awareness: Gaining full visibility of the AI attack surface
Identity
Ping YOUniverse: How to classify and manage AI agents

PODCASTS

Vulnerability Management
Beyond the CVE Count: The Real State of Vulnerability Management – Charles Loring – CSP #228
Privacy
Safely exploiting vulnerabilities at scale, TVs attack privacy, and the news. – Snehal Antani – ESW #476
AI/ML
9/11 at 25, OfferLoader, Gemini CLI, Liquid, 10% Doom, Josh Marpet, and More – SWN #615
Vulnerability Management
It’s More Secure When It’s Disabled – PSW #943
AI benefits/risks
Security Money: The Index Explodes, as the History of AI Teaches Us About Investments – John Willis – BSW #464

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

Digital vpn security shield with data transfer and lock

Vulnerability Management

Check Point patches two critical VPN gateway bugs

Steve ZurierSeptember 11, 2026

Check Point fixed two 9.8-severity VPN flaws before any known exploitation in the wild.

(Credit: Mojahid Mottakin – stock.adobe.com)

Anthropic finds 4th real-world attack by Claude agent, details models’ ‘biased reasoning’

Laura FrenchSeptember 11, 2026

Mythos 5 was highlighted as being especially prone to believing the real world was a simulation.

Ransomware

CISA: WatchGuard Firebox bug exploited in ransomware campaigns

Steve ZurierSeptember 10, 2026

Ransomware gangs are exploiting a WatchGuard Firebox flaw that CISA flagged nine months ago.

3D rendering of an AI agentic workflow automation software interface with connected nodes and data triggers.

PaperCut MF/NG flaws attacked with hundreds of AI agents

Laura FrenchSeptember 10, 2026

The AI-assisted campaign enabled attackers to gain domain admin in as little as 5 minutes.

Digital warning signs: A digital landscape, with warning signs on the screen, which depicts an alert or error.

Network Security

F5 BIG-IP malware hides web shells in memory to evade detection

Steve ZurierSeptember 9, 2026

Memory-resident malware targeting F5 BIG-IP appliances can evade file-based security defenses.

BigBear 2.0 phishing campaign compromises MFA-protected Microsoft accounts

Laura FrenchSeptember 9, 2026

Researchers discovered more than 3,300 unique victims across 461 organizations.

Cybersecurity concept remote code execution on foreground screen, ASCII style in a code development editor. Vulnerability and attack on colored code editor. Text in English, English text

Vulnerability Management

N-able patches critical N-central RCE flaw amid exploit concerns

Steve ZurierSeptember 8, 2026

N-able patched a critical N-central RCE flaw amid concerns about potential active exploitation.

ASCII smuggling challenges email phishing filters, Microsoft warns

Laura FrenchSeptember 4, 2026

Invisible Unicode tag characters often used for AI prompt injection have appeared in high-volume phishing attacks.

Events