George Bailey

George Bailey is the byline of the CyberExperts editorial desk, the team behind the CyberExperts Daily Brief. The desk covers vulnerabilities, breaches and security news from vendor advisories, CISA alerts and other primary sources, and links those sources in every story. Questions or corrections: [email protected].
6 Solutions for Setting AI Agent Guardrails at Scale

6 Solutions for Setting AI Agent Guardrails at Scale

AI agents can change CRM records, run shell commands, and move data. Compare six guardrail platforms that control actions, not just answers.
Tuesday’s brief: Exchange inboxes, then Rejetto HFS, Dell’s update tool, Denmark’s registry

Tuesday’s brief: Exchange inboxes, then Rejetto HFS, Dell’s update tool, Denmark’s registry

Any logged-in user can read other mailboxes on on-prem Exchange until Friday’s update is in. Also: Rejetto HFS probing, Dell…
A partner’s login pulled 8.8 million Danish records — check what your vendor keys can pull

A partner’s login pulled 8.8 million Danish records — check what your vendor keys can pull

A small company’s legitimate access to Denmark’s CPR register ran automated lookups for about ten days. Would you notice a…
Dell’s server update tool needs its own update — move DSU to 2.3.0.0

Dell’s server update tool needs its own update — move DSU to 2.3.0.0

A critical flaw in Dell System Update can give an unauthenticated remote attacker root. Upgrade to 2.3.0.0 and fix the…
Rejetto file servers are being probed — upgrade HFS before the scans turn into break-ins

Rejetto file servers are being probed — upgrade HFS before the scans turn into break-ins

A public exploit forges an HFS admin login with no password. Scanning started October 1. Move to 3.3.4, or take…
One phished login could read any inbox on on-prem Exchange — install the reissued update

One phished login could read any inbox on on-prem Exchange — install the reissued update

Any logged-in user can open other mailboxes on on-prem Exchange until the October 2 update is installed. September’s original update…
Monday’s brief: NetScaler again, then Zammad, Dell storage, GitLab’s AI gateway

Monday’s brief: NetScaler again, then Zammad, Dell storage, GitLab’s AI gateway

Last week’s NetScaler build does not close Sunday’s SAML bug. Also: Zammad due today, Dell CSM 1.18.0, and a self-hosted…
Self-hosted GitLab AI gateways can run commands from a flow

Self-hosted GitLab AI gateways can run commands from a flow

A logged-in Duo user can break out of a custom flow on a self-hosted AI Gateway. Update the gateway image.…
Dell storage modules can hand over array admin with no login

Dell storage modules can hand over array admin with no login

Missing authentication in Dell Container Storage Modules can return storage admin credentials. Upgrade to 1.18.0 and rotate secrets. There is…
If the help desk is still on Zammad 6.5, today is the due date

If the help desk is still on Zammad 6.5, today is the due date

A session bug on older Zammad can run code as the app user. CISA’s federal due date is October 5.…
NetScaler SAML Flaw CVE-2026-88779: Fixed Builds and What to Hunt

NetScaler SAML Flaw CVE-2026-88779: Fixed Builds and What to Hunt

Citrix CVE-2026-88779 crashes SAML-configured NetScaler gateways and is in CISA KEV. Fixed builds, what to hunt, and the newer Oct 8 fix (CVE-2026-107406).
8 Best AI Exposure Management Tools for CISOs in 2026

8 Best AI Exposure Management Tools for CISOs in 2026

CISOs are drowning in scanner findings while attackers weaponize new flaws within a day. Compare eight AI exposure management tools that focus on reachable risk.
Friday’s brief: FortiMail due Saturday, then BoKS, vm2, Satellite

Friday’s brief: FortiMail due Saturday, then BoKS, vm2, Satellite

FortiMail is under active exploitation with a federal clock ending Saturday. Also: Fortra BoKS overflow, a vm2 sandbox escape, and…