(Adobe Stock)

(Adobe Stock)

Fortinet FortiMail bug exploited in the wild, added to CISA KEV list

Steve ZurierOctober 2, 2026

Exploited FortiMail flaw lets attackers turn email security gateways into persistent footholds.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Incident Response
Lean and mean: How the concept of a minimum viable company speeds recovery and boosts resilience
Critical Infrastructure Security
Cyber resilience is becoming a supply-chain problem

PODCASTS

IoT
Hacking Without Boundaries – Michael Jenkins – PSW #946
Leadership
Defending at AI Speed as Quantum Threats and AI Policies Won’t Save You – Nolan Karpinski – BSW #467
Vulnerability Management
Venus in Furs, Money Laundering, AI Hijinx, MCP, Thunderbastard, and Aaran Leyland – SWN #620
Application security
Going From Bug Bounty Bugs to More Secure Systems – Shlomie Liberow – ASW #402
Phishing
Measuring the Value of SecOps; BH Interviews with Fortra, Helmet, Above, & Keeper – Christopher Crowley, Josh Davies, Kaushik Shanadi, Tricia Howard, Darren Guccione – ESW #478

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

Mimecast’s Beth Miller: Leading others to make the right decisions

SC StaffOctober 2, 2026

The Mimecast Field CISO says true leadership is empowering people to decide properly without your input.

Vulnerability Management

Cisco Catalyst SD-WAN Manager flaw added to CISA’s exploit list

Steve ZurierOctober 1, 2026

CISA flags actively exploited Cisco SD-WAN Manager authentication bypass flaw.

Fake Zoom installer delivers new CloudSyncD macOS backdoor

Laura FrenchOctober 1, 2026

The malware uses a unique Unicode-based method to hide the user’s password in a fake Zoom configuration file.

(Adobe Stock)

2 new forms of malware exploited Citrix Netscaler devices one month before patch

Steve ZurierSeptember 30, 2026

Google report focuses on exploit of CVE-2026-88772, which executed lateral movement a month before a patch existed.

(Credit: Tada Images – stock.adobe.com)

Malicious ChatGPT Custom GPTs lead to ClickFix attack

Laura FrenchSeptember 30, 2026

Instructions to visit a malicious website were delivered through the real ChatGPT site.

SC Awards Celebrate 30 Years of Recognizing the People and Technology Advancing Cybersecurity

Kelley DamoreSeptember 29, 2026

57% of security execs report challenges with onboarding entry-level staff

Steve ZurierSeptember 29, 2026

SkillBit survey says security teams struggle to find and train new staff as AI compresses the time they have to patch new bugs.

Threat Intelligence

ShinyHunters targets Oracle PeopleSoft in new campaign amid FBI attack claims

Laura FrenchSeptember 29, 2026

Google says ShinyHunters found a way to bypass WAF rules to reach vulnerable endpoints.

Events