(Adobe Stock)

Cisco Catalyst SD-WAN Manager flaw added to CISA’s exploit list

Steve ZurierOctober 1, 2026

CISA flags actively exploited Cisco SD-WAN Manager authentication bypass flaw.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Oktane
Okta: Fake IT workers are getting stealthier than ever
AI/ML
ESET’s Ryan Grant on resilience in the AI era

PODCASTS

Leadership
Defending at AI Speed as Quantum Threats and AI Policies Won’t Save You – Nolan Karpinski – BSW #467
Vulnerability Management
Venus in Furs, Money Laundering, AI Hijinx, MCP, Thunderbastard, and Aaran Leyland – SWN #620
Application security
Going From Bug Bounty Bugs to More Secure Systems – Shlomie Liberow – ASW #402
Phishing
Measuring the Value of SecOps; BH Interviews with Fortra, Helmet, Above, & Keeper – Christopher Crowley, Josh Davies, Kaushik Shanadi, Tricia Howard, Darren Guccione – ESW #478
Vulnerability Management
AI butterfly effects, Chuds, CISA, FBI, FreeBSD, Ghost Accounts, Pervs, Josh Marpet – SWN #619

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

Fake Zoom installer delivers new CloudSyncD macOS backdoor

Laura FrenchOctober 1, 2026

The malware uses a unique Unicode-based method to hide the user’s password in a fake Zoom configuration file.

(Adobe Stock)

2 new forms of malware exploited Citrix Netscaler devices one month before patch

Steve ZurierSeptember 30, 2026

Google report focuses on exploit of CVE-2026-88772, which executed lateral movement a month before a patch existed.

(Credit: Tada Images – stock.adobe.com)

Malicious ChatGPT Custom GPTs lead to ClickFix attack

Laura FrenchSeptember 30, 2026

Instructions to visit a malicious website were delivered through the real ChatGPT site.

SC Awards Celebrate 30 Years of Recognizing the People and Technology Advancing Cybersecurity

Kelley DamoreSeptember 29, 2026

57% of security execs report challenges with onboarding entry-level staff

Steve ZurierSeptember 29, 2026

SkillBit survey says security teams struggle to find and train new staff as AI compresses the time they have to patch new bugs.

Threat Intelligence

ShinyHunters targets Oracle PeopleSoft in new campaign amid FBI attack claims

Laura FrenchSeptember 29, 2026

Google says ShinyHunters found a way to bypass WAF rules to reach vulnerable endpoints.

Citrix sign on its office building in Fort Lauderdale, Florida, USA, an American cloud computing and virtualization technology company.

Patch/Configuration Management

CISA warns organizations to patch 2 critical Citrix NetScaler RCEs

Steve ZurierSeptember 28, 2026

Federal agencies are told to make the patches by this Wednesday

Island’s Michael Leland: Owning the teamwork

SC StaffSeptember 28, 2026

The importance of giving responsibility to -- and taking responsibility for -- your team.

Events