ASCII smuggling challenges email phishing filters, Microsoft warns

Laura FrenchSeptember 4, 2026

Invisible Unicode tag characters often used for AI prompt injection have appeared in high-volume phishing attacks.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Identity
Ping YOUniverse: The next stage of human authentication
Identity
Ping YOUniverse: How AI lets identity management go ‘headless’

PODCASTS

Vulnerability Management
Wireguard, Chrome, RMMS, Sonicwall, Microsoft, Sumerian VPNS, Harvard, Josh Marpet… – SWN #613
IoT
Linux Threat Hunting – PSW #942
Leadership
Preventing Wire Fraud and 2 Interviews From BH USA 2026 From Optiv Security and Kai – Todd Sorrel, John Hurley, Galina Antova – BSW #463
Vulnerability Management
Victorians, TONIC, RevStealer, Fireant, OpenClaw, PowerShell, SuperBox, Aaran Leyland – SWN #612
Application security
Fixing Software Weaknesses Rather Than Just Finding More Flaws – Nidhi Aggarwal, Gil Geron, Braden Russell – ASW #398

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

Aruba, a Hewlett Packard Enterprise company sign atop headquarters building. Aruba Networks is a wireless networking subsidiary of HPE

Network Security

HPE patches ArubaOS-CX switches vulnerable to remote code execution

Steve ZurierSeptember 4, 2026

HPE patched 35 ArubaOS-CX flaws, including a critical bug that could enable remote code execution.

‘Empty envelope’ email attacks target company leaders

Laura FrenchSeptember 4, 2026

The technique bypasses RejectDirectSend by SMTP envelope sender blank.

Manager Pressing REMOTE MONITORING AND MANAGEMENT

Phishing campaign targets widely used RMM platforms in 46 countries

Steve ZurierSeptember 3, 2026

Phishing attacks trick victims into installing legitimate RMM tools for remote access.

(Credit: frank – stock.adobe.com)

Grafana fixes critical SSRF flaw affecting Grafana MCP servers

Laura FrenchSeptember 3, 2026

An MCP caller could potentially reach unintended internal services leveraging the MCP server’s network position.

Vulnerability Management

SonicWall advises customers to patch two new SMA1000 zero-days

Steve ZurierSeptember 2, 2026

Attackers are chaining two SonicWall SMA1000 zero-days to gain remote code execution.

Threat Management

Microsoft identifies ‘TerminalFix’ campaign spreading Python reverse tunnel

Laura FrenchSeptember 2, 2026

The campaign uses DLL sideloading and PNG steganography to evade detection.

Caution screen concept

Application security

JFrog Artifactory flaw exploited days after patch release

Steve ZurierSeptember 1, 2026

Attackers exploited a JFrog Artifactory flaw days after its patch, threatening software supply chains.

RevStealer malware spread through fake Claude Opus 5 download

Laura FrenchSeptember 1, 2026

The Windows infostealer uses several evasion measures to remain mostly invisible to security systems.

Events