Daily news, analysis and practical guides explaining what happened, who is affected and what to do next. We also turn this knowledge into practical training for organisations.
Vulnerabilities and CVEs WordPress 7.0.2 fixes a critical Core RCE chain. Review affected versions, safe rollout, compromise detection and post-update validation steps.
Vulnerabilities and CVEs Grafana OnCall has critical flaw CVE-2026-63087. Understand exposure, potential impact, detection hypotheses and a safe risk-reduction plan.
AI Security OpenAI proposes useful intelligence per dollar. Learn to build an AI scorecard combining outcomes, full cost, quality, security and operational risk.
AI Security DeepMind and Isomorphic Labs connect AI with biosecurity. We examine 15+ partnerships, trusted access, biological SynthID research and dual-use controls.
Vulnerabilities and CVEs CISA confirms active exploitation of CVE-2026-46817 in Oracle EBS. Check affected 12.2.3–12.2.15 systems, response priorities and post-patch actions.
AI Security A practical comparison of Claude Fable 5 and GPT-5.6 Sol for coding, agents, cybersecurity, cost and enterprise deployment—without treating vendor benchmarks as independent proof.
Vulnerabilities and CVEs CVE-2026-56164 and CVE-2026-56155 are being exploited. Learn how to establish SharePoint and AD FS exposure, patch safely and collect defensible validation evidence.
Vulnerabilities and CVEs SonicWall confirms active exploitation of SSRF and RCE flaws in SMA 1000. Check affected builds, hunt vendor IOCs and decide whether to patch or rebuild.
Vulnerabilities and CVEs Mozilla has fixed CVE-2026-15718 and CVE-2026-15719. Public exploit code is not confirmed exploitation, but it sharply reduces the time available to update.
Penetration Testing and AppSec GitHub has added AI detections to code scanning and a /security-review command. Understand the prerequisites, limitations and a safe rollout plan for engineering teams.
Penetration Testing and AppSec GitHub's 18-hour test exposed legacy TLS clients before permanent SHA-1 removal on 15 September. Find risk across Git, APIs, CI/CD and vendor integrations.
AI Security The US is launching a clearinghouse for scanning, validation and vulnerability prioritisation. We assess what GOLD EAGLE may change and what evidence is still missing.
Vulnerabilities and CVEs PTC released critical fixes for additional Windchill and FlexPLM versions on 14 July. Review affected releases, web-shell IOCs and a safe PLM patching plan.
Vulnerabilities and CVEs SAP’s July update fixes critical flaws in NetWeaver, Approuter and Commerce Cloud. Understand the 9.9 risk, patch order and the evidence needed to close remediation.
Threats and Incidents Authorities warn that Russian actors are exploiting poorly secured routers. Review the observed risk, hardening priorities and an evidence-led edge-device checklist.
Once a month, a concise summary of the vulnerabilities and threats that matter. No spam, unsubscribe anytime.
