AI is overwhelming patch management. Here's how teams adapt
AI is overwhelming patch teams, forcing a shift to smarter, automated remediation.
SC Media
15 articles
Upbound Group reports $13 million in losses due to data breach and fraud
Upbound Group, a fintech company, disclosed that a data breach allowed threat actors to steal customer information and documents, which were then used to com...
South Korean Ministry of Foreign Affairs data breach impacts thousands
Hackers gained access to South Korea's National Diplomatic Academy's online education system for 10 months, stealing personal information of current and form...
Council worker sentenced for accessing sensitive family records
A council worker has received a suspended sentence for unlawfully accessing sensitive personal records of family members and acquaintances.
Ransomware payments fail to prevent repeat attacks, new data shows
As outlined in The Register, new data from Proofpoint revealed that a significant portion of organizations in the UK continue to pay ransom demands, despite ...
CIOs brace for AI threats while investing in AI defense
LevelBlue: CIOs see AI as critical to cyber resilience amid rising threats.
What the recent SharePoint bugs told us about the patch race
Patching still works – but it can’t handle the entire defense by itself.
The organizations that got breached had strong identity programs
Machine identities were the gap. AI agents are widening it.
Linux kernel security faces challenge with surge in CVEs
The sheer number of Linux kernel CVEs, published recently, has raised questions about effective vulnerability management.
Lookout launches tool to identify software exposure risk in mobile apps
This new tool inspects Android and iOS apps at the binary level, creating a software bill of materials for each application and checking components against v...
Microsoft ends extended security updates for Exchange 2016 and 2019 in October 2026
The Exchange Server team confirmed that there will be no further extensions beyond the current Period 2 ESU program, which concludes in October 2026.
Adobe Acrobat extension vulnerability allowed WhatsApp data theft
The HermeticReader vulnerability (CVE-2026-48294) exploited a flaw in the Adobe Acrobat extension, allowing any malicious website to inject commands into the...
TrickBot variant uses DNS tunneling for command and control
This TrickBot variant, detailed in research by Fortinet's FortiGuard Labs, utilizes a modular architecture but features a redesigned transport layer.
EU's plan to remove risky telecom suppliers could cost 4 times more than estimated
A report by the GSMA, a global trade body representing the telecom industry, suggests the direct cost of replacing equipment from designated high-risk vendor...
Ubuntu snap-confine vulnerability grants root access
The vulnerability stems from a security hardening change made in July 2025, where snap-confine shifted to a set-capabilities model.