The 7 Report

Illustration of a mesh of connected device nodes on a dark blue grid, with one orange node sending dashed lines toward a crowned server and a key

No Patch Yet for New Tailscale SSH Findings: A Briefing on the Root-Access Claims, What Is Still Unverified, and the Settings to Tighten This Week

L7 News October 26, 2026

Tailscale has become a popular way for small teams to reach servers and office machines without a traditional VPN. A...

Illustration of a stack of coins beside an open hand, a shield with a broken link and a falling bar chart, on a dark blue grid

Japanese Companies Are Now Paying Customers After Cyberattacks: Your Questions on GMO, Park24 and the Bill That Follows a Breach

L7 News October 26, 2026

When a company is hacked, the costs most people think of are the ransom demand and the cleanup. A run...

A web administrator in a green cardigan rests her chin on her hand at an office desk and looks toward her monitor with a concerned, thoughtful expression

PHP2Shell Moves From Probing to Proven: A Honeypot Has Caught Working Remote Code Execution. How the Week Unfolded, and What to Check Today

L7 News October 26, 2026

Since the two PHP2Shell flaws became public, defenders have had one small comfort: the attack traffic hitting the internet looked...

A gray-haired office manager in glasses and a light blue shirt sits at his desk beside an open laptop with a wary expression

Microsoft Teams Will Start Flagging Phishing Chats With AI in November

L7 News October 25, 2026

Here Is Why a Smarter Chat Filter Still Needs Tighter External Access, Trained Staff and a Call-Back Rule Behind ItThe...

Illustration of a domed city hall with three app tiles above it, two crossed out and one still lit, beside a padlock, an emergency light and a phone handset

Columbia, South Carolina Confirms Ransomware: A Day-by-Day Timeline of the Outage, and What Stayed Running

L7 News October 25, 2026

The City of Columbia, South Carolina’s capital, has confirmed that it was hit by ransomware. Several services residents use every...

A technician in a gray polo reaches up to fit a round white wireless access point into a ceiling tile in an office

72 Flaws, Eight Rated 10 Out of 10: The Spec Sheet for HPE’s Aruba Wireless Patch, and Which Version Your Access Points Need

L7 News October 25, 2026

Wireless gear tends to be installed once and then forgotten on the ceiling. HPE’s latest update for its Aruba wireless...

A bearded network engineer in a navy quarter-zip sweater stands in a small equipment room beside shelves of network gear and open laptops

70,000 Credentials Later: How One Access Broker Turned Exposed Firewalls and VPN Portals Into a Pipeline for Ransomware Crews

L7 News October 25, 2026

Most companies picture an attacker picking them out by name. A new investigation shows the opposite. A threat actor known...

Illustration of a rack firewall appliance with a separate management port, a dashed path from a globe blocked by a brick wall, and a calendar with several days checked off

PHP2Shell Reaches Palo Alto Firewalls: The First PAN-OS Hotfixes Are Listed, Most Arrive by October 30, and the Management Interface Is the Door to Close Now

L7 News October 25, 2026

Last week the PHP project rushed out fixes for two critical bugs nicknamed PHP2Shell. The question many firewall owners asked...

The 7 Report

Headlines

Nearly a Year Later, Harvard’s Alumni and Donor Breach Finally Has a Number: 851,000 Email Addresses

One Supplier, Many Airlines: The Amadeus Booking Breach Keeps Growing

Chainalysis Says an AI-Driven Attacker Got Into Its Internal Tools: What Was Taken, What Was Not, and What Is Still Unclear

All Three Links Now Patched: How the Ivanti Connect Secure Attack Chain Went From Zero-Day to Full Fix, and What the Attackers Were After

Twenty Minutes, Ten Blockchains, $6.3 Billion: Binance Says the Biggest Crypto Theft on Record May Have Started on One Engineer’s Laptop

Layer 7 Picks

Only 1 in 200 Vulnerabilities Ever Gets Used in an Attack. Microsoft’s Data Shows Which Ones, and Why Servers Are the Weak Spot

Microsoft Quietly Closed a Windows 11 Path From Standard User to SYSTEM, With No CVE to Track

Can The Cloud Strengthen Business Continuity?

No Patch Yet for New Tailscale SSH Findings: A Briefing on the Root-Access Claims, What Is Still Unverified, and the Settings to Tighten This Week

Japanese Companies Are Now Paying Customers After Cyberattacks: Your Questions on GMO, Park24 and the Bill That Follows a Breach

PHP2Shell Moves From Probing to Proven: A Honeypot Has Caught Working Remote Code Execution. How the Week Unfolded, and What to Check Today

Microsoft Teams Will Start Flagging Phishing Chats With AI in November

Columbia, South Carolina Confirms Ransomware: A Day-by-Day Timeline of the Outage, and What Stayed Running

72 Flaws, Eight Rated 10 Out of 10: The Spec Sheet for HPE’s Aruba Wireless Patch, and Which Version Your Access Points Need

70,000 Credentials Later: How One Access Broker Turned Exposed Firewalls and VPN Portals Into a Pipeline for Ransomware Crews

PHP2Shell Reaches Palo Alto Firewalls: The First PAN-OS Hotfixes Are Listed, Most Arrive by October 30, and the Management Interface Is the Door to Close Now

Only 1 in 200 Vulnerabilities Ever Gets Used in an Attack. Microsoft’s Data Shows Which Ones, and Why Servers Are the Weak Spot

No Cards, No ATMs: A Cyber Incident Sends Turning Stone’s Casinos and Stores in Central New York to Cash Only

Your AI Coding Assistant May Be Installing Abandoned Software: The MCPhantom Findings at a Glance

The Malware Came From the Factory: How Google Tore Down a 1.3 Million-Device TV Box Botnet

Nearly a Year Later, Harvard’s Alumni and Donor Breach Finally Has a Number: 851,000 Email Addresses

Headlines

Layer 7 Picks

Trending Stories

Featured Solutions

You may have missed