Ransomware

(Adobe Stock)

CISA: WatchGuard Firebox bug exploited in ransomware campaigns

Steve ZurierSeptember 10, 2026

Ransomware gangs are exploiting a WatchGuard Firebox flaw that CISA flagged nine months ago.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
AI/ML
When English becomes exploit code: The hidden risk inside MCP servers
Identity
Security at the moment of action: Applying access gateway for AI agents

PODCASTS

Vulnerability Management
It’s More Secure When It’s Disabled – PSW #943
AI benefits/risks
Security Money: The Index Explodes, as the History of AI Teaches Us About Investments – John Willis – BSW #464
Vulnerability Management
Cybercabs, Robohobos, BigBear, Nightmare Eclipse, weChat, Flock, ASCII, Aaran Leyland – SWN #614
Vulnerability Management
Security Conversations on AI, Agents, and Emerging Threats from Black Hat 2026 – Michael Leland, Sean Murphy, Idan Plotnik, Ido Geffen – ASW #399
Breach
Shadow AI Epidemic: Uncovering Agents on the Endpoint, British Library Breach, & News – Amit Assaraf – ESW #475

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

3D rendering of an AI agentic workflow automation software interface with connected nodes and data triggers.

PaperCut MF/NG flaws attacked with hundreds of AI agents

Laura FrenchSeptember 10, 2026

The AI-assisted campaign enabled attackers to gain domain admin in as little as 5 minutes.

Digital warning signs: A digital landscape, with warning signs on the screen, which depicts an alert or error.

Network Security

F5 BIG-IP malware hides web shells in memory to evade detection

Steve ZurierSeptember 9, 2026

Memory-resident malware targeting F5 BIG-IP appliances can evade file-based security defenses.

BigBear 2.0 phishing campaign compromises MFA-protected Microsoft accounts

Laura FrenchSeptember 9, 2026

Researchers discovered more than 3,300 unique victims across 461 organizations.

Cybersecurity concept remote code execution on foreground screen, ASCII style in a code development editor. Vulnerability and attack on colored code editor. Text in English, English text

Vulnerability Management

N-able patches critical N-central RCE flaw amid exploit concerns

Steve ZurierSeptember 8, 2026

N-able patched a critical N-central RCE flaw amid concerns about potential active exploitation.

ASCII smuggling challenges email phishing filters, Microsoft warns

Laura FrenchSeptember 4, 2026

Invisible Unicode tag characters often used for AI prompt injection have appeared in high-volume phishing attacks.

Aruba, a Hewlett Packard Enterprise company sign atop headquarters building. Aruba Networks is a wireless networking subsidiary of HPE

Network Security

HPE patches ArubaOS-CX switches vulnerable to remote code execution

Steve ZurierSeptember 4, 2026

HPE patched 35 ArubaOS-CX flaws, including a critical bug that could enable remote code execution.

‘Empty envelope’ email attacks target company leaders

Laura FrenchSeptember 4, 2026

The technique bypasses RejectDirectSend by SMTP envelope sender blank.

Manager Pressing REMOTE MONITORING AND MANAGEMENT

Phishing campaign targets widely used RMM platforms in 46 countries

Steve ZurierSeptember 3, 2026

Phishing attacks trick victims into installing legitimate RMM tools for remote access.

Events