OPINION Attackers can gain persistent software-as-a-service (SaaS) access through a single convincing consent prompt, without needing passwords or malware. Security teams have long treated multifactor authentication (MFA) as a strong signal that an account is protected. That thinking is understandable,… Read More "MFA Won’t Save You From OAuth Consent Abuse"
CloudSyncD MacOS Backdoor Hides Behind Fake Zoom Installer
A new macOS backdoor has been hidden inside a fake Zoom installer that prompts users for their login password before launching an embedded second stage. The malware, dubbed CloudSyncD, has moved from development testing to samples configured against live command-and-control… Read More "CloudSyncD MacOS Backdoor Hides Behind Fake Zoom Installer"
Hacker Conversations: Rob Juncker, a Knock at the Door and a Moral Compass
Rob Juncker is chief product and technology officer at Mimecast. Is he a hacker? “Unequivocally yes,” he says. “And I think every security leader should be able to answer ‘yes’ to that question, for so many reasons.” He started early,… Read More "Hacker Conversations: Rob Juncker, a Knock at the Door and a Moral Compass"
Cisco SD-WAN Manager hit by zero-day admin access attack
“While every configuration is affected, the practical exposure is not identical across organizations: an internet-accessible management interface presents a much more immediate risk than one isolated within a tightly controlled administrative network,” Grover said, reinforcing Cisco’s advice. Compromising the management… Read More "Cisco SD-WAN Manager hit by zero-day admin access attack"
Cisco Zero-Day Highlights API Endpoint Authentication Issues
Cisco this week disclosed a slew of critical security vulnerabilities impacting its Identity Services Engine (ISE), including a maximum-severity zero-day flaw that’s under exploitation. CVE-2026-76460 is an authentication bypass vulnerability impacting an API in ISE, Cisco’s network access control and… Read More "Cisco Zero-Day Highlights API Endpoint Authentication Issues"
Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation
Cisco has issued an urgent security update to address a newly uncovered zero-day vulnerability in Cisco Catalyst SD-WAN Manager which has already been exploited in the wild. In a security advisory published on September 30, Cisco issued a warning about… Read More "Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation"
Enterprises Struggle to Prepare for AI and Quantum Threats, PwC Says
On the global stage, too few organizations are implementing new technology to defend against new technology employed by attackers. PwC’s 2027 Global Digital Trust Insights report surveys just short of 4,000 businesses and tech leaders in more than 70 countries.… Read More "Enterprises Struggle to Prepare for AI and Quantum Threats, PwC Says"
WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory
Ravie LakshmananOct 01, 2026Vulnerability / Web Security Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having to infect the site again. The… Read More "WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory"
Google makes Gemini 4 AI model available to a trusted few
The company is also aiming to close the gap with Anthropic and OpenAI in cyberdefence by enabling Argon to autonomously find, validate, and patch critical software vulnerabilities. On CWE-bench v1, a benchmark for vulnerability remediation, Google reports a 68% score,… Read More "Google makes Gemini 4 AI model available to a trusted few"
Rogue Behavior: OpenAI Reveals More Model Misalignment Incidents
OpenAI revealed several new incidents in which its models deviated from instructions, constraints, or a user’s expectations, adding to a growing list of warning signs that have the industry increasingly calling for tighter restrictions on AI development. The latest examples… Read More "Rogue Behavior: OpenAI Reveals More Model Misalignment Incidents"