Digital warning signs: A digital landscape, with warning signs on the screen, which depicts an alert or error.

(Adobe Stock Image)

F5 BIG-IP malware hides web shells in memory to evade detection

Steve ZurierSeptember 9, 2026

Memory-resident malware targeting F5 BIG-IP appliances can evade file-based security defenses.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Identity
Security at the moment of action: Applying access gateway for AI agents
Incident Response
Closing the accountability divide: How to prove what happened in a breach

PODCASTS

AI benefits/risks
Security Money: The Index Explodes, as the History of AI Teaches Us About Investments – John Willis – BSW #464
Vulnerability Management
Cybercabs, Robohobos, BigBear, Nightmare Eclipse, weChat, Flock, ASCII, Aaran Leyland – SWN #614
Vulnerability Management
Security Conversations on AI, Agents, and Emerging Threats from Black Hat 2026 – Michael Leland, Sean Murphy, Idan Plotnik, Ido Geffen – ASW #399
Breach
Shadow AI Epidemic: Uncovering Agents on the Endpoint, British Library Breach, & News – Amit Assaraf – ESW #475
Vulnerability Management
Wireguard, Chrome, RMMS, Sonicwall, Microsoft, Sumerian VPNS, Harvard, Josh Marpet… – SWN #613

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

BigBear 2.0 phishing campaign compromises MFA-protected Microsoft accounts

Laura FrenchSeptember 9, 2026

Researchers discovered more than 3,300 unique victims across 461 organizations.

Cybersecurity concept remote code execution on foreground screen, ASCII style in a code development editor. Vulnerability and attack on colored code editor. Text in English, English text

Vulnerability Management

N-able patches critical N-central RCE flaw amid exploit concerns

Steve ZurierSeptember 8, 2026

N-able patched a critical N-central RCE flaw amid concerns about potential active exploitation.

ASCII smuggling challenges email phishing filters, Microsoft warns

Laura FrenchSeptember 4, 2026

Invisible Unicode tag characters often used for AI prompt injection have appeared in high-volume phishing attacks.

Aruba, a Hewlett Packard Enterprise company sign atop headquarters building. Aruba Networks is a wireless networking subsidiary of HPE

Network Security

HPE patches ArubaOS-CX switches vulnerable to remote code execution

Steve ZurierSeptember 4, 2026

HPE patched 35 ArubaOS-CX flaws, including a critical bug that could enable remote code execution.

‘Empty envelope’ email attacks target company leaders

Laura FrenchSeptember 4, 2026

The technique bypasses RejectDirectSend by SMTP envelope sender blank.

Manager Pressing REMOTE MONITORING AND MANAGEMENT

Phishing campaign targets widely used RMM platforms in 46 countries

Steve ZurierSeptember 3, 2026

Phishing attacks trick victims into installing legitimate RMM tools for remote access.

(Credit: frank – stock.adobe.com)

Grafana fixes critical SSRF flaw affecting Grafana MCP servers

Laura FrenchSeptember 3, 2026

An MCP caller could potentially reach unintended internal services leveraging the MCP server’s network position.

Vulnerability Management

SonicWall advises customers to patch two new SMA1000 zero-days

Steve ZurierSeptember 2, 2026

Attackers are chaining two SonicWall SMA1000 zero-days to gain remote code execution.

Events