The U.S. General Services Administration (GSA) is an independent agency that helps manage and support the basic functioning of federal agencies. The GSA supplies products and communications, provides transportation and office space, and oversees the government’s real estate portfolio, among… Read More "TPRM for Government Contractors: General Services Administration Policies"
Exploitation Hits Rejetto HFS Vulnerability Discovered by AI
Threat actors are exploiting a critical vulnerability in Rejetto HTTP File Server (HFS) to bypass authentication and gain remote code execution (RCE), VulnCheck warns. Tracked as CVE-2026-61500 (CVSS score of 9.3), the flaw exists because the open source file server… Read More "Exploitation Hits Rejetto HFS Vulnerability Discovered by AI "
Google Suspends Open-Source Bug Bounty Due to AI Vulnerability Reports
Google has suspended its open-source bug bounty program until 2027 in an effort to stem the flood of AI submissions. In a statement posted on social media on October 1, Google said the pause was prompted by “a significant rise… Read More "Google Suspends Open-Source Bug Bounty Due to AI Vulnerability Reports"
Third-Party Risk Management Policy Template (Free)
Organizations commonly rely on third parties such as vendors, suppliers, and other business partners to handle critical operations. While third-party relationships can provide many benefits, they also introduce a range of risks that can threaten data security, compliance, and business… Read More "Third-Party Risk Management Policy Template (Free)"
More UK Schools Are Recovering Faster from Cyber Incidents
UK schools are getting better at incident recovery, although major gaps in cybersecurity capability still exist across the sector, according to new government data. The government’s Office of Qualifications and Examinations Regulation (Ofqual) released new figures on October 1 to… Read More "More UK Schools Are Recovering Faster from Cyber Incidents"
Security Bottleneck? Here’s How to Accelerate Vendor Approvals
Organizations today move fast, but slow vendor approvals can grind everything to a halt. As companies increasingly rely on third-party vendors, slow vendor approvals create a serious security bottleneck. This slowdown costs organizations valuable time and resources—and leaves them open… Read More "Security Bottleneck? Here’s How to Accelerate Vendor Approvals"
Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
Ravie LakshmananOct 05, 2026Vulnerability / Web Security A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming… Read More "Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE"
Frontline Education Breach Impacts K-12 School District Staff
A third-party breach at a popular software provider in the US education sector has enabled cybercriminals to make off with Social Security numbers and other employee data. Frontline Education provides administration software for thousands of K-12 school districts, enabling teams… Read More "Frontline Education Breach Impacts K-12 School District Staff"
Vendor Offboarding: Best Practices for Ensuring Security
When organizations hear “third-party risk management,” they often consider the processes needed to mitigate risks when working with a third-party vendor. These can include procurement risks and risks associated with starting new vendor relationships, often referred to as “onboarding,”—but what… Read More "Vendor Offboarding: Best Practices for Ensuring Security"
Should the CISO role be split in two?
Some larger enterprises opt to have a deputy CISO as a way to manage the workload. In this case, the CISO is responsible for strategic direction, engaging with the board and other executives, and risk management, while the deputy role… Read More "Should the CISO role be split in two?"