(Adobe Stock)

(Adobe Stock)

CISA adds chained Ivanti Connect Secure bug to its exploited list

Steve ZurierOctober 14, 2026

CISA orders urgent patching of exploited Ivanti VPN flaw as attackers chain three vulnerabilities.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Risk Assessments/Management
The AI you can’t see: Bringing third-party shadow AI into the risk picture
MDR
Transforming MDR: How AI challenges and strengthens protection services

PODCASTS

Security Staff Acquisition & Development
AI Resilience as CISOs Can Balance Internal AI Risk and Productivity Concerns – Bill O’Connell, Ryan Grant – BSW #469
Vulnerability Management
Claude Visa, Yandex, Danfoss, Bricks, Purgatorius, Muse, Xandr, Grindr, Aaran Leyland – SWN #624
Vulnerability Management
What’s Not Found in AppSec? – ASW #404
Supply chain
Exposure Management: Stop Measuring Controls. Start Measuring Risk. – Heather Ceylan – CSP #229
Data Security
Data Security in the AI Era, Don’t Let AI Ruin your Presentation, and the Weekly News – Hadar Krasner – ESW #480

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

An equity graph as a symbol of a good or bad market day. Slide background for showcasing day trading.

‘The Flip’: Retired Lt. Gen. Mary O’Brien warns the biggest data threat is now coming in, not going out

SC StaffOctober 14, 2026

Former Air Force cyber leader warns AI-generated misinformation threatens executive decision-making.

Active Directory

Why partner access outlives the partnership

SC Media Editorial Intelligence, reviewed by Dara GibsonOctober 14, 2026

Malicious AI robot holding keys to open padlock. Vector illustration for cybersecurity articles, tech blogs, reports

Application security

AI agents breach production systems, spread malware in major exploits

OWASP GenAI Security Project Team October 14, 2026

AI agents breached production systems, stole credentials and spread malware through software supply chains.

Vulnerability Management

GitLab patches 10.0 flaw in its CE and EE products

Steve ZurierOctober 13, 2026

GitLab patches critical CVSS 10.0 RCE flaw as experts warn of software supply chain risks.

(Adobe Stock)

Application security

Critical Bricksforge WordPress flaw exploited in attacks

Steve ZurierOctober 12, 2026

Attackers exploit critical Bricksforge WordPress flaw to execute code without authentication.

(SonicWall)

Vulnerability Management

SonicWall SSRF bug rated 10.0 exploited in SMA1000 Appliance Work Place

Steve ZurierOctober 9, 2026

Attackers target critical SonicWall SMA1000 flaw as security experts urge immediate patching.

WiFi router

Network Security

Four US states allege TP-Link defrauded customers, seek damages

Steve ZurierOctober 8, 2026

Four states sue TP-Link over alleged security misrepresentations and ties to China.

Fortinet, Inc. is an American cybersecurity company it develops, sells security products like Firewalls, end point security in Frisco, Texas.

FortiBleed campaign still attacking Fortinet devices, US agencies warn

Steve ZurierOctober 7, 2026

FBI warns FortiBleed attackers remain active, turning stolen credentials into persistent access.

Events