Lost time. Lost jobs. Lost friends. Lost family. Lost lives. Our joint investigation reveals the system that has divided the West Bank and measures what it cost people to move through it. longreads,palestine,israel Source link Read More "How Israeli Checkpoints Choke Palestinian Life in the Occupied West Bank"
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe. The activity, observed by Mandiant Consulting and Google Threat Intelligence Group (GTIG)… Read More "Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT"
Human Attacker Hits Machine-Speed Exploitation of Marimo RCE
A human attacker has moved from a vulnerable Marimo notebook to an SSH bastion host in eight seconds using a toolkit built by hand, hitting a speed usually associated with AI-driven attacks. In a technical write-up published on September 11,… Read More "Human Attacker Hits Machine-Speed Exploitation of Marimo RCE"
Malicious Twitch Extension Exposes 31,000 Users’ OAuth Tokens
A malicious Twitch browser extension has been reportedly forwarding the live OAuth session tokens of around 31,000 users to proxy servers run by a Russian commercial bot service, according to Socket. The cross-store browser extension Twitch Enhanced Viewer | JeetBot… Read More "Malicious Twitch Extension Exposes 31,000 Users’ OAuth Tokens"
Can we jail a superintelligence?
Human approval is valuable, but “a human is in the loop” is not a complete control. Security leaders should ask what information reaches the reviewer, whether the AI can shape that information and whether one person can approve an irreversible… Read More "Can we jail a superintelligence?"
Apple Patches CoreGraphics Zero Day Exploited in Attacks
Apple has issued a security update designed to fix a zero-day vulnerability which it claimed may have been exploited in an “extremely sophisticated” attack. In a bulletin on September 28, the tech giant attributed the discovery of CVE-2026-86950 to the… Read More "Apple Patches CoreGraphics Zero Day Exploited in Attacks"
Whatever happened to the 36-month IT security roadmap?
Those agent findings spurred McManus to add control audits and system segmentation to the open-source observability company’s roadmap. Neither had been part of the plan a few months earlier. Planning beyond a year is close to “an exercise in futility,”… Read More "Whatever happened to the 36-month IT security roadmap?"
Good Security Rating? Your Dark Web Exposure Says Otherwise
Ask a security leader how secure their company is, and most will point to a number. A rating, maybe a grade, or a score out of some maximum that a vendor calculated for them. That number only measures half the… Read More "Good Security Rating? Your Dark Web Exposure Says Otherwise"
Third-Party Risk Management vs Vendor Risk Management
Organizational risk management often mentions third-party risk management (TPRM) and vendor risk management (VRM). The cybersecurity industry commonly uses these terms interchangeably, but there is a distinct difference between these two crucial components of an organization’s broader risk management strategy.… Read More "Third-Party Risk Management vs Vendor Risk Management"
Best Vendor Risk Management Software for 2026
According to the World Economic Forum’s Global Cybersecurity Outlook, 65% of large organizations now name supply chain vulnerabilities as their greatest cyber challenge, up from 54% a year earlier. The spreadsheets and once-a-year questionnaires many security teams still rely on… Read More "Best Vendor Risk Management Software for 2026"