CompTIA A+ in 2026: two exams, 220-1201 and 220-1202, $274 each, who can skip A+ for a security career, where people lose points and a 10-week plan.
OffSec OSCP: the 24-hour proctored exam, 70 of 100 points to pass, why the AD set decides it, the $1,749 bundle, OSCP+ renewal and a 16-week plan.
CompTIA SecurityX CAS-005 (formerly CASP+): up to 90 questions in 165 minutes, pass/fail scoring, the $544 fee, and why experienced engineers still fail.
ISC2 CCSP in 2026: 100-150 questions in 3 hours, 700 to pass, $599 exam and $135 AMF, the August 2026 outline with AI/ML topics, and the CISSP shortcut.
CISM in 2026: 150 questions in 4 hours, 450 to pass, $575/$760 fees, the five-year rule, the November 2026 outline and why engineers pick wrong answers.
ISC2 CC after the free program closed: the $199 exam plus $50 yearly fee, the September 2026 outline, and when Security+ is the better first cert.
EC-Council CEH v13: 125 questions in 4 hours, the $100 application route vs official training, the real $1,050 self-study cost and an 8-week plan.
CompTIA PenTest+ PT0-003: up to 90 questions in 165 minutes, 750 to pass, the $439 fee, how it differs from CEH and OSCP, and a 12-week lab-first plan.
Network+ N10-009: who should take it and who should skip to Security+ or CCNA, where candidates lose points, the $399 fee and a 10-week subnetting plan.
CISA says ransomware crews now exploit TeamCity CVE-2026-63077. Upgrade to 2025.11.7 or 2026.1.3, take the server off the Internet, and check for compromise.
A pre-auth SQL injection in Roundcube's virtuser_query plugin is now exploited. Update to 1.6.16 or 1.7.1 or disable the plugin. Here's what to check today.
A cPanel CalDAV/CardDAV flaw lets any hosting account run code as root. Update to 11.134.0.57, 11.136.0.41 or 11.138.0.8, plus WP Toolkit 6.11.3, today.
GitLab's issue-by-email address carries an account-wide token that can push code and run CI jobs past IP allowlists. How to rotate it and check for misuse.
