4+ day, 12+ hour ago   (323+ words) The quantum threat may still be ahead, but the work to prepare for it has already started. The G7 says uncertainty over when a cryptographically relevant quantum computer will emerge is no reason for organizations to delay preparations. On Sept. 3, 2026, the…...

1+ week, 2+ day ago   (382+ words) CISA added seven exploited flaws to its KEV catalog, including LiteLLM, Kestra, Starlette, and SonicWall vulnerabilities under active attack. AI gateways are becoming high-value attack surfaces. CISA added seven actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on…...

1+ week, 5+ day ago   (695+ words) China-linked Fire Ant hackers compromised Cisco IOS XR routers, management hosts, and authentication systems to create covert paths into other networks. Compromising a server can expose one machine. Compromising the right router can give attackers visibility into an entire network....

1+ week, 5+ day ago   (583+ words) Project Watershed 250 brings free AI tools, red teaming and private-sector expertise to Texas water utilities during a six-month cybersecurity pilot. A new White House pilot is putting Texas water utilities in the cyber hot seat, using AI and private-sector tools…...

3+ week, 2+ day ago   (472+ words) Microsoft patched an Entra ID RCE vulnerability exploited in attacks that required no authentication or user interaction. A maximum-severity vulnerability in Microsoft Entra ID allowed unauthenticated attackers to remotely execute code and was exploited in attacks before Microsoft mitigated the…...

3+ week, 3+ day ago   (417+ words) Several of the critical WebLogic Server flaws could allow remote attackers to compromise vulnerable systems without authentication. Several of the most critical fixes affect Oracle WebLogic Server, where remotely exploitable vulnerabilities could compromise business critical applications and sensitive data. CVE…...

3+ week, 5+ day ago   (549+ words) Attackers aren’t sticking to the usual playbook. Read past newsletters here. Shell Hit in Cl0p PTC Data Theft Campaign Shell is investigating Cl0p’s claim that it stole 89 GB of sensitive engineering and project data. Patch affected PTC systems, restrict internet exposure,…...

4+ week, 2+ day ago   (440+ words) SAP Commerce Cloud flaw CVE-2026-58231 is being actively exploited in the wild. A vulnerability in SAP Commerce Cloud that can allow unauthenticated attackers to execute arbitrary code is being exploited in the wild just days after SAP released a security…...