SC Media
20 articles
Identity Security Posture Management (ISPM): Visibility, Risk, and Remediation
Closing the accountability divide: How to prove what happened in a breach
It's not enough to contain an incident. You must also understand why and how it happened.
OAuth and OIDC: Token Flows, Scopes, and Common Attack Vectors
What CISOs need to know about Confidential Computing in 2026
Confidential Computing protects data in use, helping CISOs secure sensitive AI and cloud workloads.
N-able patches critical N-central RCE flaw amid exploit concerns
N-able patched a critical N-central RCE flaw amid concerns about potential active exploitation.
What Authenticity Failure Costs the Business
6 ways teams can leverage zero-trust to manage AI agents
By leveraging zero-trust, teams can address the blast radius problem with AI agents.
What AI Validation Actually Tests
Security Conversations on AI, Agents, and Emerging Threats from Black Hat 2026 - Michael Leland, Sean Murphy, Idan Plotnik, Ido Geffen - ASW #399
Shadow AI Epidemic: Uncovering Agents on the Endpoint, British Library Breach, & News - Amit Assaraf - ESW #475
Ping YOUniverse: The next stage of human authentication
Ping Identity says its combination of biometrics and verifiable documentation is the next step in access management.
Wireguard, Chrome, RMMS, Sonicwall, Microsoft, Sumerian VPNS, Harvard, Josh Marpet... - SWN #613
New Linux toolkit found in trojanized HAProxy targeting South Korean organizations
The implant, identified by Rapid7 Labs with medium confidence as originating from North Korean state-sponsored actors, targets entities in South Korea's auto...
PostGREShell vulnerability allows server takeover
The vulnerability stems from missing authorization in PostgreSQL's logical decoding feature.
Upwind Security raises $300 million in Series C funding
Upwind Security offers a platform that automatically maps cloud assets and refreshes data every 30 seconds to account for frequent configuration changes.
Coder platform targeted by attackers delivering malicious Terraform modules
The attack occurred between 07:35 UTC and 21:45 UTC on Monday, August 31.
Cisco addresses critical vulnerabilities in Nexus 9000 switches and IOS XR
The critical Nexus vulnerability (CVE-2026-20212) allows unauthenticated attackers to execute code with root privileges by binding to an unrestricted IP addr...
Thomson Reuters court software breach exposes sensitive data in Canada and US
The incident, detected on June 30, impacted the C-Track Canada system, exposing files from three Ontario courts.
Abliteration.ai launches service for uncensored AI models
Abliteration.ai aims to enable offensive cyber operations, red-teaming, and agent testing that other models refuse.