A critical vulnerability in the Bricksforge WordPress plugin is being exploited in the wild, according to WordPress security company Patchstack. The vulnerability is tracked as CVE-2026-85097 and it has a CVSS score of 9.8. Unauthenticated attackers can exploit it to… Read More "Bricksforge WordPress Plugin Vulnerability Exploited in the Wild"
What to Look for in a Cyber Deception Solution
Not automatically. Agentless deception can be attractive where organizations want to limit additional endpoint software or where endpoints cannot support an agent. Agent deception or locally delivered artifacts can provide different capabilities depending on the architecture. The better evaluation is… Read More "What to Look for in a Cyber Deception Solution"
Bring Your Own Agent: Your Employees’ Assistants Are Already Logged In
The personal AI agents rollout is going about as smoothly as expected: Amazon now blocks Meta’s Muse because it doesn’t identify itself as a bot while browsing; Instinct keeps raising privacy concerns; and the horror stories from pretty much every… Read More "Bring Your Own Agent: Your Employees’ Assistants Are Already Logged In"
These ARE the droids you’re looking for
There’s an old leadership fantasy that goes something like this: The CISO surveys a sprawling technology estate, discovers 11 tools doing the work of four, calculates the licensing savings, selects a shiny new strategic platform and declares that consolidation has… Read More "These ARE the droids you’re looking for"
Major French Supermarket Chains Hit by Cyber-Attack
Several chains of supermarkets in France have reportedly been hit by a cyber-attack targeting the refrigeration facilities of several stores across the country. One of the affected companies is Coopérative U, a retail cooperative encompassing supermarkets branded as Hyper U,… Read More "Major French Supermarket Chains Hit by Cyber-Attack"
What is Attack Surface Management? Tools and Best Practices
Attack surface management (ASM) is a fundamental cybersecurity approach that involves continuously identifying, analyzing, remediating, and monitoring all the current and potential ways an outside attacker might try to break into your organization’s systems. These entry points are collectively known… Read More "What is Attack Surface Management? Tools and Best Practices"
Old-School Credit Card Scams Are Far From Dead
Welcome to Kernel Panic! A weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security. To receive this newsletter in your inbox each week, sign up here. When every random text… Read More "Old-School Credit Card Scams Are Far From Dead"
Canonical Websites Disrupted in Second DDoS Attack This Year
Canonical’s websites were disrupted last week by a distributed denial-of-service (DDoS) attack, months after a larger attack hit the Ubuntu maker’s infrastructure. The company confirmed the attack on October 8 in a post on the Ubuntu Discourse forum. “Canonical’s websites… Read More "Canonical Websites Disrupted in Second DDoS Attack This Year"
Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
Ravie LakshmananOct 12, 2026Vulnerability / Network Security Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure. The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0),… Read More "Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch"
Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk
Security researchers at Zenity Labs have disclosed a set of zero-click vulnerabilities in Salesforce Agentforce that allowed attackers to silently exfiltrate sensitive data related to customer relationship management (CRM) without any interaction from the victim and without the attacker ever… Read More "Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk"