Cybersecurity

Your SD-WAN Manager has a Saturday deadline — and attackers already have admin

Your SD-WAN Manager has a Saturday deadline — and attackers already have admin

Cisco Catalyst SD-WAN Manager auth bypass is in the wild. CISA's federal due date is Saturday, October 3. Patch, then…
Wednesday’s brief: Azure wiped in minutes, then Elementor, Spectre, and a NetScaler hunt

Wednesday’s brief: Azure wiped in minutes, then Elementor, Spectre, and a NetScaler hunt

Storm-3168 used stolen Azure service principals to delete storage in seven minutes. Also: Elementor CSRF, a new Spectre Linux leak,…
Federal NetScaler clock ends today. Mandiant just published the web shells to hunt

Federal NetScaler clock ends today. Mandiant just published the web shells to hunt

CISA's due date is Wednesday. Mandiant documented WHIPSHOT and SLAPSHOT on appliances hit before the patch. Patch, then hunt....
A new Spectre trick can pull a Linux root password hash in minutes

A new Spectre trick can pull a Linux root password hash in minutes

Branch Target Reuse works on modern CPUs. Kernel fixes are in; patch Linux hosts that share space with untrusted code....
One link in Elementor 4.3 can make an admin create another admin

One link in Elementor 4.3 can make an admin create another admin

Versions 4.3.0 and 4.3.1 skip WordPress REST CSRF checks. Update to 4.3.2 before someone clicks the wrong email....
Someone stole an Azure service principal and wiped storage in seven minutes

Someone stole an Azure service principal and wiped storage in seven minutes

Storm-3168 used compromised workload identities to delete Azure Storage, Key Vaults, and Function Apps. Check your service principals before standup....
Security+ vs CySA+ (2026): Which CompTIA Cert to Take

Security+ vs CySA+ (2026): Which CompTIA Cert to Take

Security+ vs CySA+ in 2026: SY0-701 vs CS0-004 compared on difficulty, renewal, DoD 8140 work roles and jobs, plus which CompTIA cert to take first.
DoD 8140 Approved Certifications (2026): Roles and Levels

DoD 8140 Approved Certifications (2026): Roles and Levels

DoD 8140 approved certification list for 2026: how DCWF work roles replaced 8570 IAT/IAM levels, which certs qualify (Matrix V2.1) and contractor rules.
Tuesday’s brief: PeopleSoft attackers slip past WAFs, then Kiteworks, iPhones, and leaky Supabase apps

Tuesday’s brief: PeopleSoft attackers slip past WAFs, then Kiteworks, iPhones, and leaky Supabase apps

ShinyHunters is back on unpatched PeopleSoft, Kiteworks’ weekend shutdown, an iPhone fix for targeted attacks, and 16,326 open Supabase databases....
The app your team built with AI may be leaking its users table. Check Supabase today

The app your team built with AI may be leaking its users table. Check Supabase today

UpGuard found 16,326 Supabase databases with tables anyone can read. If someone shipped a quick app on Supabase, check row…
iPhones still on iOS 26 need Apple’s new update after targeted attacks

iPhones still on iOS 26 need Apple’s new update after targeted attacks

Apple says a CoreGraphics bug may have been used against specific people on iOS before 27. Update to 26.7.1 or…
Kiteworks told customers to power down for a weekend. Check your version and Advanced Forms

Kiteworks told customers to power down for a weekend. Check your version and Advanced Forms

A federal tip led Kiteworks to recommend a weekend shutdown. The flaw sits in Advanced Forms, and every customer should…
PeopleSoft attackers are walking past WAF rules. Patch HR and payroll servers now

PeopleSoft attackers are walking past WAF rules. Patch HR and payroll servers now

ShinyHunters changed one letter in the URL and got past the WAF rules protecting PeopleSoft. Oracle’s June fix is the…