SonicWall Warns of an Exploited SSL VPN Flaw That Can Skip SAML and MFA: Patch Gen7 and Gen8 Firewalls Now 
A Password Longer Than 256 Characters Can Unlock Accounts That Should Have No Password: Patch Alpine and Other musl SSH Servers Now 
The Switch Was Patched, the Exploit Still Worked: Zyxel GS1900 Owners Need a Second Firmware Update 
A Security Tool’s Own Update Turned on Its Customers: About 2,950 Linux Hosting Servers Ran a Data-Stealing Script 
Attackers Are Now Hijacking Exposed Node-RED Automation Servers With a Single Web Request 
Agentic AI Attack Tools Are Hitting Finance Faster. Layered Defenses Still Beat Any Single Product
When attack agents move at machine speed, one control is not a strategyAttackers are no longer only writing scripts by...
Researchers Say Anyone Can Rent Internet Addresses That Exit Through the White House Network
For a few dollars on a public residential proxy service, researchers say, traffic can be made to look like it...
Your Questions on the WordPress Update Window That Can Still Let Attackers Run Code, Answered
Patching an exploited WordPress flaw should close the door. For some sites, the act of installing that patch can open...
Clicking “Don’t Ask Again” in Claude Code Put Secrets into a File—and 1,122 Public GitHub Copies Still Hold Them
A convenience click in an AI coding assistant can turn into a public credential dump. When a developer tells Claude...
Ahold Delhaize Puts a Price Tag on Its October Cyberattack: Up to $280 Million in Lost Sales
When a grocery chain takes systems offline to contain a cyberattack, the damage shows up weeks later in the earnings...
SonicWall Warns of an Exploited SSL VPN Flaw That Can Skip SAML and MFA: Patch Gen7 and Gen8 Firewalls Now
If your company’s remote access rides on a SonicWall firewall with SAML login turned on, treat this as a same-day...
Microsoft Saw 7.3 Billion Email Phishing Threats in Q3. The Fix Is Still Layered Defenses, Not One Product
Layered email and identity defenses beat any single filter when phishing volume and MFA bypass tricks both riseMicrosoft Threat Intelligence...
AI Voice, Fake CEO Email, Then a Fake Lawyer on the Line: Three Charged in a $129 Million Business Fraud Case
The email says the CEO needs a confidential wire. The follow-up call sounds like the CEO. The lawyer on the...
Your Questions on the Barracuda Email Gateway Flaws That Chain to Root Without a Login, Answered
Email security appliances sit at a privileged spot on the network. This week’s Barracuda patches are a reminder that the...
Fake OpenAI and SpaceX Event Invites Are a Trap for Work Microsoft and Google Logins
An invite to a free ChatGPT Pro month or a private SpaceX briefing looks like a perk. In a campaign...