Tanaka emerges as top data leak broker in first half of 2026
Following insights from The Cyber Express, the cybercrime economy is increasingly valuing stolen data as a significant commodity, with one threat actor, Tana...
SC Media
20 articles
OpenWrt releases security updates for critical DHCPv6 flaw and other vulnerabilities
As noted by The Hacker News, OpenWrt released version 24.10.
Model Context Protocol releases major update to AI interaction technology
The latest release of MCP overhauls its request metadata processing, replacing a complex handshake workflow with a stateless protocol core.
JetBrains patches critical TeamCity flaw enabling unauthenticated code execution
JetBrains released security updates for TeamCity On-Premises to address a critical vulnerability, CVE-2026-63077, which carries a CVSS score of 9.8.
vBulletin forum software vulnerable to remote code execution
A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through template rendering, posing a ...
Loss of control: The AI agent governance crisis
AI governance is an identity challenge, but legacy identity systems weren't made to handle non-deterministic software.
Seven controls enterprise teams need in place to avoid another OpenAI-Hugging Face incident
Seven controls help enterprises govern AI agents and prevent costly sandbox escapes.
Transparency, The Key To Team Motivation For Remote Workers - Charles Gaudet - BSW #458
Proof-of-concept exploit released for Certighost Windows AD CS vulnerability
Reported by Bleeping Computer. A proof-of-concept exploit was released for a vulnerability in Windows Active Directory Certificate Services (AD CS) known as ...
Arista patches critical command injection flaw in VeloCloud Orchestrator exploited in attacks
As reported by Bleeping Computer, Arista released a patch for a critical command injection vulnerability affecting on-premises VeloCloud Orchestrator (VCO) d...
Operation Cronos dismantled LockBit ransomware group by undermining affiliate trust
As reported by Dark Reading, Operation Cronos, a significant international law enforcement effort, successfully dismantled LockBit, once one of the most domi...
Hackers exploit FastJson vulnerability for remote code execution
Bleeping Computer disclosed that hackers are actively exploiting a critical vulnerability in the FastJson open-source Java library, enabling remote code exec...
German government report details Windows Hello for Business biometric security limitations
Germany’s Federal Office for Information Security (BSI) published a technical analysis of Windows Hello for Business, detailing how the system performs biome...
Italian organizations targeted by 148 ransomware attacks in first half of 2026
Italian organizations faced 148 confirmed ransomware attacks in the first half of 2026, with the manufacturing sector being the most frequently targeted.
Malicious Steam workshop map delivered malware to MECCHA CHAMELEON players
As outlined in Cyber Insider, a malicious Steam Workshop map for the game MECCHA CHAMELEON exploited a vulnerability in the game's mod-loading system to deli...
Google introduces new cybercrime naming taxonomy, diverging from Microsoft's initiative
The Register reports that Google unveiled its own taxonomy for categorizing cybercrime groups, a move that appears to sideline a previous industry-wide effor...
Deep Fakes, Molten Salt, PLCS, Checkpoint, Hugging Face, CENTOS, Josh Marpet and More - SWN #602
IPMI bug in BMCs found after 22 years, exposes 24,000-plus servers
Decades-old IPMI bug leaves thousands of internet-facing servers exposed.
How AI is turning old data sprawl into a new security risk
AI is exposing hidden data sprawl, making governance a cybersecurity priority.
Define a Minimum Viable Business for disaster recovery -- before the next incident
Here’s the conversations CIOs and CISOs need to have before the next security incident.