Digital login interface with data network connections and abstract code

(Adobe Stock)

Was the Australia health portal incident a misconfiguration error?

Steve ZurierSeptember 25, 2026

Questions emerge over whether a reported AI hack was actually a basic government portal misconfiguration.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Exposure management
From Data to Decisions to Action: Why Exposure Management’s Next Chapter Runs Through Validation
Black Hat
Cyber recovery plans lag behind AI, ransomware threats

PODCASTS

Vulnerability Management
AI butterfly effects, Chuds, CISA, FBI, FreeBSD, Ghost Accounts, Pervs, Josh Marpet – SWN #619
IoT
AI Will Save Us, or Not? – PSW #945
Leadership
Balancing AI Benefits and Risks as Your Next CISO Could be Artificial Intelligence – Evan McHenry – BSW #466
Vulnerability Management
WWIII, Debt, JFK, CISA, SUSE, OpenAI, Google, DORA, Aaran Leyland, and More – SWN #618
Application security
Understanding Prompt Injection In Order to Contain It – Julie Brunias – ASW #401

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

Security Operations

Kiteworks warns customers to shut down servers due to possible imminent attack

Laura FrenchSeptember 25, 2026

Kiteworks’ CISO cited “credible threat intelligence from law enforcement” for the urgent alert.

Vulnerability Management

CISA publishes framework for improving CVE program as vulnerability counts rise

Laura FrenchSeptember 25, 2026

The framework outlines four key areas of focus for the CVE program’s “Quality Era.”

(Adobe Stock)

Critical 9.8 JetBrains TeamCity RCE exploited by ransomware, says CISA

Steve ZurierSeptember 24, 2026

Ransomware groups exploit a critical TeamCity flaw, putting software supply chains at risk.

Critical Infrastructure Security

MemTensor npm, PyPI packages compromised with cross-platform credential stealer

Laura FrenchSeptember 24, 2026

A Go binary called sckit was added to four malicious releases, targeting developer secrets.

The FBI seal is seen on its headquarters at the J. Edgar Hoover FBI building in Washington.

FBI probes ShinyHunters claims of massive agent data theft

Steve ZurierSeptember 23, 2026

ShinyHunters claims it stole 2 TB of sensitive data on thousands of current and former FBI agents.

First ‘autonomous AI C2 implant’ uses panel of models to vote on next task

Laura FrenchSeptember 23, 2026

CLOSEDQUORUM is designed to use DeepSeek, Qwen, Mistral and Gemini to make post-exploitation decisions.

Micro-Segmentation Architecture for Zero Trust Enterprise Security

Critical Infrastructure Security

Just 13% of network segments are OT-only, says Forescout Research

Steve ZurierSeptember 22, 2026

Poor network segmentation leaves OT and IoT devices exposed to lateral movement.

Application security

Simulation highlights OWASP LLM Top 10 risk of unbounded consumption

Laura FrenchSeptember 22, 2026

Forcepoint research showed how poisoned input can run up AI agent costs.

Events