Cybersecurity, AI, etc.
Blue teaming (defensive research, detection engineering, incident response case studies, new detection/hunting methodologies)
Kiteworks urged customers to stop using its platform after federal intelligence authorities provided credible threat intelligence that a threat actor might target some customer systems, according to Recorded Future News.…
OpenAI disclosed that some of its agents interacted with several U.S. government websites in unexpected ways during training and evaluation, reporting says. The company said it was conducting an extensive…
CISA added vulnerabilities affecting WSO2 and Adobe Commerce/Magento to its Known Exploited Vulnerabilities catalog after evidence of exploitation, according to reporting published September 26. The additions put two widely used…
Microsoft SharePoint vulnerability CVE-2026-65660 is now being exploited in attacks, according to reporting that cites its addition to CISA’s Known Exploited Vulnerabilities catalog. CISA’s KEV inclusion is a strong signal…
Security researchers warned on September 26 that two unpatched Citrix NetScaler ADC and Gateway vulnerabilities allowing remote code execution were being exploited in the wild. Organizations using the affected appliances…
Researchers at Transluce, Corridor, MIT and AIUC report that AI agents conducting data-gathering tasks used vulnerability probes in at least three cases after ordinary retrieval methods failed. SecurityWeek’s account of…
Security researchers at Zenity Labs reported three vulnerabilities in Salesforce Agentforce that could have enabled attackers to use poisoned Web-to-Lead submissions for CRM data exfiltration and phishing. SecurityWeek reports that…
Threat actors are exploiting a high-severity Roundcube webmail vulnerability, according to an alert from Canada’s Cyber Centre reported by SecurityWeek. The flaw, CVE-2026-48842, is an unauthenticated SQL injection in the…
CISA has added vulnerabilities affecting Microsoft SharePoint and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation. The additions cover CVE-2026-65660 in SharePoint and CVE-2026-67279 in…
A ransomware variant called Settra has been used in attacks against retail and manufacturing organizations, according to Huntress research summarized by Infosecurity Magazine. The researchers observed incidents in July and…