The survey found that compromised NHIs (31%) are nearly 2x as likely to be the primary entry point compared to phishing and social engineering (17%), the second-ranked answer. NHI-related misuse was also the most commonly reported identity-based event type at… Read More "SpyCloud 2026 Identity Threat Report Finds Non-Human Identities Are Now the Leading Path into the Enterprise"
Every security leader has lived some version of this incident. A researcher, a scanner, or a well-meaning stranger finds one of your API keys sitting in a public repository. Now the clock is running, but instead of a kill switch,… Read More "This Key Will Self-Destruct: An Open Standard for Revocable API Keys"
A flaw in DeepSeek Harness, DeepSeek’s open-source tool for running AI coding agents on a developer’s machine, let a sandboxed agent turn off its own sandbox with a single command. The tool runs an agent’s commands inside an operating-system sandbox,… Read More "DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval"
DAVID provides authorized users with access to extensive driver and vehicle information, meaning a successful intrusion can yield considerably more than a database full of names and license numbers. “A complete scan gives criminals much more than an identification number… Read More "ShinyHunters claims Florida DMV breach, puts data on the clock"
Ivanti on Tuesday announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products. Neurons for ITSM received fixes for the largest number of security defects. Of the… Read More "Ivanti Patches Critical Flaws Across Enterprise Security Products"
Ravie LakshmananSep 09, 2026Vulnerability / Endpoint Security The security researcher known as Chaotic Eclipse has dropped a proof-of-concept (PoC) for yet another zero-day in Microsoft Defender. The vulnerability, codenamed ShieldCrash, is assessed to be a patch bypass for CVE-2026-69414 (CVSS… Read More "Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed"
Industrial giants Schneider Electric, Siemens, and Aveva have published September 2026 Patch Tuesday advisories, informing customers about vulnerabilities found in their ICS products. Schneider Electric published four new security advisories and updated four others, including one originally released in 2019.… Read More "ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws"
Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory instead of in a file on disk, Sophos said in an analysis published on September 7. When Apache loads any of the… Read More "F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans"
Use Python to make the attack repeatable Manual probing is valuable for discovery, but it is a poor regression method. A small Python harness can define an objective, generate approved mutations, send them through the same interface used by clients,… Read More "How to pen test LLM, RAG and GenAI applications"
Future phishing campaigns may no longer involve a detectable physical web page. Barracuda has analyzed a new type of phishing campaign that adds both stealth and flexibility to traditional phishing. Rather than standard social engineering to persuade a target to… Read More "New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser"
