CISA confirms 2025 Windows Task Host flaw exploited by ransomware groups

Steve ZurierAugust 18, 2026

Experts say teams should make this a priority, noting that the patch has been available since last November.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Vulnerability Management
AI-powered defense strategy: How to find and fix vulnerabilities at machine speed
Identity
Ping YOUniverse 2026: Four livestreams to watch

PODCASTS

Leadership
Preventing a Breakout as AI Agent Threats Is One of Three Top CISO Concerns – Rob Allen – BSW #461
Vulnerability Management
Secrets, Red Agent, GitHub, evoooo1bot, DecryptAds, Copilot, Aaran Leyland, and More – SWN #608
Threat Intelligence
Augmenting Threat Intel Analysis with Agents – Sai Kiran Uppu, Chris Wallis, Ramin Farassat – ASW #396
Vulnerability Management
Sandbox Escapes with Rubrik’s Zero Labs, AI recorders eroding privacy, and the news – Joe Hladik – ESW #472
Vulnerability Management
Mathematicians, Lazarus, Akira, Computer History, Zoom, LiteLLM, Josh Marpet and More – SWN #607

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Perspectives

In Brief

More Resources

(Credit: Rafael Henrique – stock.adobe.com)

Wiz agent finds Snowflake repo flaw in code co-authored by GitHub Copilot Autofix

Laura FrenchAugust 18, 2026

The flaw allowed the agent to extract a Jira token by opening a crafted issue.

Vulnerability Management

Critical SAP Commerce Cloud flaw exploited days after patch

Steve ZurierAugust 17, 2026

Attackers moved quickly to exploit a critical SAP Commerce Cloud bug following its patch.

(Credit: Felix Geringswald – stock.adobe.com)

MacOS AmnesiaStealer malware spread through ClickFix, grants live browser control

Laura FrenchAugust 14, 2026

A fake GitHub download page hosts the malicious ClickFix command.

ICIT electrotech

Critical Infrastructure Security

AI-driven energy buildout raises cybersecurity, supply chain risks

SC StaffAugust 14, 2026

AI-driven energy growth brings new cyber and supply chain risks to critical infrastructure.

Internet Code Hack Background

Critical Infrastructure Security

White House looks to engage private sector in offensive hacking ops

Steve ZurierAugust 14, 2026

Trump expands private-sector role in U.S. offensive cyber operations, raising governance concerns.

Threat Management

DPRK’s Lazarus Group exploits Windows zero-day in backdoor campaign

Laura FrenchAugust 14, 2026

Initial access is gained through fake job offers and PDF viewer downloads.

Taiwan flag - 3D realistic waving flag on matrix digital background with binary code

Taiwan confirms AI-assisted cyberattack on government systems

Steve ZurierAugust 13, 2026

AI-assisted cyberattack on Taiwan signals a shift toward faster, more autonomous nation-state threats.

Akira ransomware attacker uses Safe Mode reboot to evade EDR

Laura FrenchAugust 12, 2026

The ransomware payload ultimately failed to deploy due to insufficient virtual memory.

Events