Apple says a CoreGraphics bug may have been used against specific people on iOS before 27. Update to 26.7.1 or…
UpGuard found 16,326 Supabase databases with tables anyone can read. If someone shipped a quick app on Supabase, check row…
Citrix confirmed two NetScaler RCEs were exploited before Saturday’s fix. One hits every appliance in the default config....
CISA’s SharePoint KEV is due Monday September 28. Microsoft already confirmed observed attacks — verify the farm builds....
Unauthenticated RCE when OnlyOffice meets a public Briefcase document. Patch to 10.1.21 or turn the feature off....
An unsupported JWT algorithm can become an admin session on WSO2 API Manager and Universal Gateway. KEV due was September…
Exploited NetScaler RCEs after Saturday’s patch, SharePoint KEV due today, Zimbra OnlyOffice public-share RCE, and WSO2 JWT auth bypass....
Most businesses install DDoS protection, tick the compliance box, and promptly forget it exists until an attack reveals the setup…
GIAC GSEC in 2026: 106 questions in 4 hours, 72% to pass, CyberLive labs, $999 per attempt, SEC401 at $8,780, and a 10-week self-study plan.
ISACA CISA in 2026: 150 questions in 4 hours, 450 to pass, $575/$760 fees, the five-year experience rule, CPE changes from January 2027 and a 12-week plan.
Microsoft SC-200 in 2026: 100 minutes, 700 to pass, $165 with free yearly renewal, the October 21 update, why KQL comes first and an 8-week study plan.
AWS Certified Security – Specialty is now SCS-C03: 65 questions in 170 minutes, 750 to pass, US$300, what moved from SCS-C02 and a 10-week study plan.
Google's Cybersecurity Certificate is a set of Coursera courses, not an exam. What it teaches, what it costs, where learners stall and how Security+ helps.
