The 7 Report

Headlines

Layer 7 Picks

Only 1 in 200 Vulnerabilities Ever Gets Used in an Attack. Microsoft’s Data Shows Which Ones, and Why Servers Are the Weak Spot

L7 News November 3, 2026

Here Is How Layered Defenses Help When Patching Cannot Keep UpEvery month brings another long list of security patches, and...

Convenience store cashier in a green polo counting cash bills behind the counter, with a dark card payment terminal beside her

No Cards, No ATMs: A Cyber Incident Sends Turning Stone’s Casinos and Stores in Central New York to Cash Only

L7 News November 3, 2026

A major Central New York casino resort was open for business on Tuesday but could not take a single credit...

Young software developer in a gray hoodie looking thoughtfully at her laptop in a bright small office

Your AI Coding Assistant May Be Installing Abandoned Software: The MCPhantom Findings at a Glance

L7 News November 3, 2026

When a developer asks an AI coding agent to connect to a service, the agent has to choose which add-on,...

Gray-haired man in reading glasses and a burgundy cardigan reading a laptop in a home study lined with bookshelves

Nearly a Year Later, Harvard’s Alumni and Donor Breach Finally Has a Number: 851,000 Email Addresses

L7 News November 3, 2026

When Harvard University disclosed a break-in at its Alumni Affairs and Development systems last November, it did not say how...

Illustration of connected workflow blocks on a canvas, with one block glowing orange as a dashed line arrives from a remote server stack, a small gateway device below and a hexagon bot on the right

Attackers Are Now Hijacking Exposed Node-RED Automation Servers With a Single Web Request

L7 News November 3, 2026

Node-RED is the kind of tool that quietly ends up everywhere. It lets people wire together sensors, web services and...

IT administrator in glasses and an olive shirt leaning over a desk with two coworkers at a computer in a bright office

Microsoft Quietly Closed a Windows 11 Path From Standard User to SYSTEM, With No CVE to Track

L7 News November 2, 2026

Here Is How Layered Defenses Help When a Fix Ships Without a CVEMany small businesses make a sensible choice: staff...

Woman in a gray blazer sitting at her kitchen table with a mug and a notebook, gesturing as she talks

Five Things to Know About the DHS Staff Directory Leak, and What It Shows About Identity Data

L7 News November 2, 2026

A leak of personnel records from the U.S. Department of Homeland Security has become one of the most closely watched...

Illustration of a signpost with one arm turned orange, redirecting a code block into a browser window that holds a chart and a wallet leaking coins, while a cloud sits bypassed above

A Page-Speed Script Turned Thief: Questions and Answers on the Polymarket DebugBear Hijack

L7 News November 2, 2026

Most business websites load small pieces of code from other companies: analytics, chat widgets, ad tags, performance monitors. On October...

The 7 Report

Headlines

Nearly a Year Later, Harvard’s Alumni and Donor Breach Finally Has a Number: 851,000 Email Addresses

One Supplier, Many Airlines: The Amadeus Booking Breach Keeps Growing

Chainalysis Says an AI-Driven Attacker Got Into Its Internal Tools: What Was Taken, What Was Not, and What Is Still Unclear

All Three Links Now Patched: How the Ivanti Connect Secure Attack Chain Went From Zero-Day to Full Fix, and What the Attackers Were After

Twenty Minutes, Ten Blockchains, $6.3 Billion: Binance Says the Biggest Crypto Theft on Record May Have Started on One Engineer’s Laptop

Layer 7 Picks

Only 1 in 200 Vulnerabilities Ever Gets Used in an Attack. Microsoft’s Data Shows Which Ones, and Why Servers Are the Weak Spot

Microsoft Quietly Closed a Windows 11 Path From Standard User to SYSTEM, With No CVE to Track

Can The Cloud Strengthen Business Continuity?

Only 1 in 200 Vulnerabilities Ever Gets Used in an Attack. Microsoft’s Data Shows Which Ones, and Why Servers Are the Weak Spot

No Cards, No ATMs: A Cyber Incident Sends Turning Stone’s Casinos and Stores in Central New York to Cash Only

Your AI Coding Assistant May Be Installing Abandoned Software: The MCPhantom Findings at a Glance

Nearly a Year Later, Harvard’s Alumni and Donor Breach Finally Has a Number: 851,000 Email Addresses

Attackers Are Now Hijacking Exposed Node-RED Automation Servers With a Single Web Request

Microsoft Quietly Closed a Windows 11 Path From Standard User to SYSTEM, With No CVE to Track

Five Things to Know About the DHS Staff Directory Leak, and What It Shows About Identity Data

A Page-Speed Script Turned Thief: Questions and Answers on the Polymarket DebugBear Hijack

Only 1 in 200 Vulnerabilities Ever Gets Used in an Attack. Microsoft’s Data Shows Which Ones, and Why Servers Are the Weak Spot

No Cards, No ATMs: A Cyber Incident Sends Turning Stone’s Casinos and Stores in Central New York to Cash Only

Your AI Coding Assistant May Be Installing Abandoned Software: The MCPhantom Findings at a Glance

The Malware Came From the Factory: How Google Tore Down a 1.3 Million-Device TV Box Botnet

Nearly a Year Later, Harvard’s Alumni and Donor Breach Finally Has a Number: 851,000 Email Addresses

Headlines

Layer 7 Picks

Trending Stories

Featured Solutions

You may have missed