(Credit: monticellllo – stock.adobe.com)

(Credit: monticellllo – stock.adobe.com)

BeyondTrust zero-day exploited by China-linked group Armory Castle

Steve ZurierOctober 16, 2026

Chinese group tied to at least three other major exploits over the past few weeks.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
MDR
How to get enterprise-grade security without an enterprise-sized team
Risk Assessments/Management
The AI you can’t see: Bringing third-party shadow AI into the risk picture

PODCASTS

IoT
AI Takes Over? – Danny Akacki – PSW #948
Security Staff Acquisition & Development
AI Resilience as CISOs Can Balance Internal AI Risk and Productivity Concerns – Bill O’Connell, Ryan Grant – BSW #469
Vulnerability Management
Claude Visa, Yandex, Danfoss, Bricks, Purgatorius, Muse, Xandr, Grindr, Aaran Leyland – SWN #624
Vulnerability Management
What’s Not Found in AppSec? – ASW #404
Supply chain
Exposure Management: Stop Measuring Controls. Start Measuring Risk. – Heather Ceylan – CSP #229

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

(Adobe Stock)

Cisco warns critical Secure Email Gateway bug exploited in the wild

Steve ZurierOctober 15, 2026

Cisco confirms active exploitation of critical email gateway flaw, warns attackers can erase evidence.

(Adobe Stock)

Vulnerability Management

CISA adds chained Ivanti Connect Secure bug to its exploited list

Steve ZurierOctober 14, 2026

CISA orders urgent patching of exploited Ivanti VPN flaw as attackers chain three vulnerabilities.

An equity graph as a symbol of a good or bad market day. Slide background for showcasing day trading.

‘The Flip’: Retired Lt. Gen. Mary O’Brien warns the biggest data threat is now coming in, not going out

SC StaffOctober 14, 2026

Former Air Force cyber leader warns AI-generated misinformation threatens executive decision-making.

Active Directory

Why partner access outlives the partnership

SC Media Editorial Intelligence, reviewed by Dara GibsonOctober 14, 2026

Malicious AI robot holding keys to open padlock. Vector illustration for cybersecurity articles, tech blogs, reports

Application security

AI agents breach production systems, spread malware in major exploits

OWASP GenAI Security Project Team October 14, 2026

AI agents breached production systems, stole credentials and spread malware through software supply chains.

Vulnerability Management

GitLab patches 10.0 flaw in its CE and EE products

Steve ZurierOctober 13, 2026

GitLab patches critical CVSS 10.0 RCE flaw as experts warn of software supply chain risks.

(Adobe Stock)

Application security

Critical Bricksforge WordPress flaw exploited in attacks

Steve ZurierOctober 12, 2026

Attackers exploit critical Bricksforge WordPress flaw to execute code without authentication.

(SonicWall)

Vulnerability Management

SonicWall SSRF bug rated 10.0 exploited in SMA1000 Appliance Work Place

Steve ZurierOctober 9, 2026

Attackers target critical SonicWall SMA1000 flaw as security experts urge immediate patching.

Events