(Credit: Rafael Henrique – stock.adobe.com)

(Credit: Rafael Henrique – stock.adobe.com)

Critical Oracle EBS bug added to CISA list of exploited vulnerabilities

Laura FrenchJuly 17, 2026

The flaw allows an unauthenticated attacker to remotely compromise Oracle Payments.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Identity
Inheriting trust: Why unified identity fabrics are becoming essential for agentic AI
AI/ML
Stop trying to ‘lock down’ your AI: Why rigid guardrails are a gift to hackers

PODCASTS

Vulnerability Management
1999 Called and It Wants It’s Exploits Back – PSW #935
Vulnerability Management
Take Back Control as Enterprises Struggle to Incorporate Risks They Don’t Understand – Ben Lipczynski – BSW #456
Vulnerability Management
Mr. Data, Joomla Babooa, 1VPNS, RabbitMQ, UEFI, Center 16, Sextortion, Aaran Leyland – SWN #598
Application security
Discovering & Securing Your AI Agent Attack Surface – Jeremy Snyder – ASW #391
AI/ML
Cloud Security Meets AI: What CISOs Need to Govern Before They Scale – Brent Neal – CSP #226

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Perspectives

In Brief

More Resources

(Adobe Stock)

Attackers execute a complete ransomware operation in under 24 hours

Steve ZurierJuly 16, 2026

Spirals ransomware encrypted a victim in under 24 hours, underscoring the need for rapid containment.

CISOs Build Practical Playbook for Governing Agentic AI

Kelley DamoreJuly 16, 2026

A practitioner-built framework for securing, and scaling agentic AI

Microsoft SharePoint faces global cyber attacks exploiting a critical zero-day vulnerability in on-premises servers, affecting businesses and agencies

Vulnerability Management

CISA warns that three SharePoint Server bugs are actively exploited

Steve ZurierJuly 15, 2026

Federal agencies given to July 17 to make the patches.

MacOS ‘CrashStealer’ malware poses as crash reporter to steal credentials

Laura FrenchJuly 15, 2026

The malware is written in C++ and uses a signed and notarized dropper to evade Gatekeeper.

OAuth client ID spoofing silently validates stolen Microsoft Entra ID credentials

Steve ZurierJuly 14, 2026

Attackers run multiple spoofing campaigns to confirm credentials.

(Credit: Postmodern Studio – stock.adobe.com)

Application security

RabbitMQ fixes flaw that allowed broker takeover via OAuth secret disclosure

SC StaffJuly 14, 2026

An additional flaw would allow an authenticated attacker with zero permissions to view cross-tenant metadata.

Russian hack attack concept, on the computer keyboard. 3D rendering

Critical Infrastructure Security

Russia’s FSB attacks critical infrastructure, says 12 Western nations

Steve ZurierJuly 13, 2026

Russian hackers target outdated Cisco routers in decade-long espionage campaign.

Rep. Rick Larsen, D-Wash.

Critical Infrastructure Security

Rep. Rick Larsen: Bipartisan infrastructure key to safer transportation

SC StaffJuly 13, 2026

Lawmaker says bipartisan infrastructure investment is essential to modernize U.S. transportation.

Events