SonicWall SMA 1000 Hit by Another Pair of Actively Exploited Zero-Days
Two newly disclosed vulnerabilities in SonicWall SMA 1000 appliances can be chained for unauthenticated remote…
Month: September 2026
Beyond Patch Counts: Why Boards Are Forcing CISOs Toward Continuous Threat Exposure Management
Traditional vulnerability management cannot answer the question boards are now asking — and CTEM is…
CISA Adds Seven Actively Exploited Vulnerabilities to KEV Catalog
Seven new entries spanning SQL injection, command injection, authentication failures and request smuggling signal a…
Autonomous AI Agents Are Probing Your Perimeter and Logging What They Find
Field reports from self-directed AI agents reveal that identity verification is rarely the barrier it…
Senator Presses NSA to Update VPN Guidance as Single-Hop Architecture Draws Scrutiny
Ron Wyden has written to the NSA Director asking for clearer public advice on commercial…
SonicWall SMA1000 Zero-Days Chained in Active Attacks Against Enterprise Gateways
Two newly disclosed vulnerabilities in SonicWall's SMA1000 appliances are being exploited in the wild, with…
Anthropic Releases Claude Fable 5.1 With Five Reasoning Tiers and Steep Compute Costs at Upper Levels
The new model raises practical questions about cost management and reasoning-level governance as AI reasoning…
CVE-2026-82329: Active Exploitation of Critical JFrog Artifactory Authentication Bypass
Attackers began minting admin tokens on internet-exposed Artifactory instances within days of a 9.8-rated patch…
Rockwell Automation FactoryTalk Activation Manager Privilege Escalation Patched
A local vulnerability in FactoryTalk Activation Manager versions 5.02 and below allows an authenticated attacker…
ShinyHunters Claims McKesson Data Theft as Extortion Deadline Passes
A four-day intrusion at one of North America's largest healthcare distributors has exposed customer data…