Water drop

(Adobe Stock)

Over 100 US water utilities had cyberattacks in July, says CISA

Steve ZurierAugust 26, 2026

More than 100 water systems faced attacks in July as CISA urges utilities to reduce OT exposure.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Data Security
Unified vision: An executive playbook for data risk management
SOC
From tool stack to defense system: Connecting the security dots

PODCASTS

Leadership
Connecting Cyber Risks to Board Outcomes & BHUSA interviews from Mimecast & Zscaler – Dan Bowden, Leslie Nielsen, Brett Stone-Gross – BSW #462
Vulnerability Management
Fibonacci, Hidden Sounds, Teams, Zimbra, Entra-ID, z.ai, Schrödinger’s, Aaran Leyland – SWN #610
Application security
Applying Zero Trust Principles to Agents – Kieran Human – ASW #397
Threat Intelligence
Can employees safely use AI agents? AI pentesting agent liabilities, and the news – Rob Allen – ESW #473
Vulnerability Management
Surveillance, Murder Hornets, Portmantau, TrueCONF, Siemens, N-Able and More – SWN #609

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Perspectives

In Brief

More Resources

"LLM" over a digital brain

Application security

OWASP updates top 10 security risks for LLM applications

SC StaffAugust 26, 2026

OWASP’s 2026 LLM Top 10 highlights prompt injection, AI agents and emerging RAG security risks.

Application security

Mobile banking trojans expand capabilities; 66% now allow full device takeover

Laura FrenchAugust 26, 2026

Banking trojans have evolved to include remote control and ransomware capabilities.

Oracle Corporation location. Oracle offers technology and cloud based solutions II

Vulnerability Management

CISA adds Oracle WebLogic bug to its list of exploited vulnerabilities

Steve ZurierAugust 25, 2026

Experts say exploiting WebLogic middleware gives attackers access to an enterprise's core business apps.

(Credit: Robert – stock.adobe.com)

Codex ClickFix installation lure spreads suspected AMOS infostealer

Laura FrenchAugust 25, 2026

The attack uses iframes embedded in Google Sites to deliver malicious content from a trusted domain.

Microsoft says Entra ID identity software not exploited, revises CVE

Steve ZurierAugust 24, 2026

While the urgency has changed, security pros say teams should still review Entra ID logs for anything suspicious before the patch.

(Credit: Timon – stock.adobe.com)

Vulnerability Management

CISA adds Zimbra Collaboration Suite bug to exploited vulnerabilities list

Steve ZurierAugust 24, 2026

Experts warn that it’s the fifth time Zimbra made the KEV this year.

Active Directory

Why Short-Lived Workloads Create Long-Lived Identity Risk

SC Media Editorial Intelligence, reviewed by Christopher AshbyAugust 24, 2026

Static Governance Cannot Keep Pace with Ephemeral Identities

(Credit: Postmodern Studio – stock.adobe.com)

Vulnerability Management

TrueConf flaws enabling attacks on meeting participants added to KEV catalog

Laura FrenchAugust 21, 2026

The flaws have been used by the Head Mare APT hacktivist group to spread PhantomCore malware.

Events