Ravie LakshmananOct 02, 2026Vulnerability / Cloud Security Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to take over susceptible systems. The vulnerabilities are listed… Read More "Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes"
Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor. The activity, which has targeted government and policy organizations in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar, involves… Read More "Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign"
Swati KhandelwalOct 02, 2026Vulnerability / Application Security A critical flaw in GitLab’s AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. The gateway is… Read More "GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers"
A vendor risk report provides stakeholders with a snapshot of your Vendor Risk Management (VRM) performance. With concerns over the threat of supply chain attacks growing, cybersecurity reporting is evolving towards an increased focus on Vendor Risk Management program performance.… Read More "Creating a Vendor Risk Summary Cybersecurity Report"
Researchers have discovered a critical vulnerability in a hardware authentication program used to access highly sensitive global government and financial systems. In cases where purely digital methods just aren’t secure enough, especially careful organizations may require that users authenticate to… Read More "SWIFT Banking & Government Middleware Enables RCE"
The UK and its allies have warned opponents of the Iranian regime that they may be subject to targeting by a Tehran-backed spyware campaign. An advisory published on September 15 by the National Cyber Security Centre (NCSC), the FBI and… Read More "NCSC and Allies Warn of Iranian Spyware Campaign"
.png?w=1140&fit=1140,855&ssl=1 "The Ultimate Vendor Risk Management Guide For Healthcare")
The healthcare industry stores an abundance of sensitive information and relies on third-party vendors for critical business services, two factors that make the sector a prime target for cyber attacks. In 2022, 707 data breaches compromised 500 or more patient… Read More "The Ultimate Vendor Risk Management Guide For Healthcare"
Experts are pushing back on classifying AI escape incidents as “going rogue” because it risks obscuring the real security problems behind these events, they say. The tech ecosystem has been inundated with stories of large language model (LLM) agents “going… Read More "Is It Fair to Blame ‘Rogue’ AI for Security Failures?"
UK-based security testing and advisory provider SE Labs is launching a new testing program to help buyers evaluate cybersecurity vendors – and has attracted some prestigious names. The six-month testing program, called PIVOT, was unveiled by SE Labs on September… Read More "Major Cyber Threat Detection Vendors Turn to New UK Testing Program"
In today’s interconnected business landscape, outsourcing to third-party vendors and service providers is an effective method for most organizations to improve operational efficiency and lower financial costs. However, as businesses form third-party partnerships, they inherit potential risks and increase the… Read More "Building a Robust Vendor Risk Management Dashboard"
