Your Company’s Phishing Tests Are Measuring the Wrong Thing

SolarWinds has issued an urgent security advisory for a high-severity vulnerability in its Access Rights Manager (ARM) product, tracked as CVE-2026-28326.… Read more → The post Unauthenticated RCE Bug Fixed in SolarWinds Access…

Gyazo, an image-sharing platform, has confirmed a breach after attackers exploited a vulnerability in its upload server, gaining unauthorized access to… Read more → The post Gyazo Server Vulnerability Targeted to Steal Millions of…

The security promise was simple. A plugin marketplace reviews a piece of code, locks it to a specific, verified version, and every AI coding agent that… Read more → The post Plugin4Shell: The Zero-Click Flaw That Broke Every…

Microsoft has patched a maximum-severity vulnerability in Azure AI Foundry that could allow unauthorized attackers to escalate their privileges over a… Read more → The post Microsoft Fixes Critical Azure AI Flaw Rated CVSS 10.0…

Researchers have discovered 13 npm packages carrying a previously undocumented JavaScript information stealer called WeaselBiscuit, introducing yet… Read more → The post WeaselBiscuit Stealer Found in 13 Malicious npm Packages…

A new Android backdoor called RatHat utilizes an AI-powered system to remotely navigate compromised devices, while also stealing sensitive information and… Read more → The post RatHat Android Malware Uses AI to Control Infected…

Read the full stories at CISOSeries.com . This week's Department of Know is hosted by Sarah Lane, with guests Jason Thomas , senior director of technology… Read more → The post The Department of Know: Passkeys phished, Cisco hits…

A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the highest level of access on a… Read more → The post Public Exploits Released for Four Linux Kernel Flaws…