[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentCybersecurity
General cybersecurity news and analysis
Dell CSM Flaws Expose Kubernetes Nodes to Unauthenticated Admin Access
A critical vulnerability in Dell CSM, known as CVE-2026-63688, allows attackers to completely bypass security measures and gain unrestricted administrative control over storage infrastructure. This flaw leaves Kubernetes nodes open to unauthenticated admin access, putting your entire storage system at risk.
GitLab Fixes 9.9 Flaw in AI Gateway That Enables Command Execution
GitLab has patched a critical 9.9-rated flaw in its AI Gateway that allowed attackers to execute commands, giving logged-in users with access to the Duo Agent Platform the potential to wreak havoc. This fix comes courtesy of HackerOne reporter invisiblemeerkat, who identified the vulnerability.
GitLab patches RCE flaw in AI Gateway service
GitLab has patched a critical remote-code-execution flaw in its AI Gateway service, known as CVE-2026-90970, which could have allowed attackers to run arbitrary commands on vulnerable instances. Even users with basic privileges could exploit this vulnerability, making it essential to apply the patch ASAP.
California Probes OpenAI Over Escaped AI Agents
California's Attorney General Rob Bonta is digging deeper into OpenAI's cybersecurity practices, serving the company with an investigative subpoena to uncover more about potential incidents and risks tied to its AI models. The probe is part of a broader effort to understand and address possible vulnerabilities, with Bonta's office seeking more information but not yet alleging any wrongdoing.
Dell Urges Admins to Patch CSM Flaws Exploiting Authorization Controls
Dell is urging admins to patch two critical CSM flaws, CVE-2026-63688 and CVE-2026-63692, that allow unauthenticated attackers to gain complete control over storage resources, potentially leading to unauthorized access and manipulation. These maximum-severity vulnerabilities can be exploited to bypass authorization controls and access sensitive storage backend administrator credentials.
OpenAI Sheds Safety Researchers After Leak of Sensitive Data
OpenAI has parted ways with three safety researchers, including Jasmine Wang, Tomek Korbak, and Mikita Balesni, after they mishandled sensitive information, sparking concerns about the company's commitment to safety and transparency. The move comes as a surprise, especially given the trio's previous warnings about the rapid development of artificial intelligence.
CISOs Struggle to Gauge Security Posture
Most security leaders struggle to confidently answer the board's toughest questions: How secure is the organization overall, what's the actual financial exposure, and is our posture improving? The problem isn't a lack of data, but scattered context that's making it hard to provide clear answers.
Google Fortifies Android with Tougher Accessibility Service Controls
Google's latest Android update brings an extra layer of security, limiting access to the AccessibilityService API to only trusted apps that serve as assistive tools when Advanced Protection is enabled. This move closes a gaping security hole while ensuring users who rely on assistive tech can still access it.
Connected Cars Expose Driver Data to Wide Array of Companies
Your car's apps may be sharing more than you think - including your name, vehicle ID, and exact location - with a surprisingly wide range of companies, putting your personal info at risk. A recent study by Northeastern University and Consumer Reports uncovered the alarming flow of sensitive data from connected cars to third-party companies.
Fortinet Warns of Zero-Day Attacks Exploiting Critical FortiMail Flaw
Fortinet has issued a critical warning about zero-day attacks exploiting a severe vulnerability in its FortiMail appliances, with a CVSS score of 9.8 that allows unauthenticated attackers to write arbitrary files on the system. This flaw, tracked as CVE-2026-104286, is under active exploitation, putting FortiMail users at risk.
Microsoft Activates Windows Settings Backup by Default for Enterprises
Microsoft just made it easier for enterprises to breathe easy: Windows settings backup is now on by default for eligible devices, ensuring users can quickly restore their settings and Microsoft Store apps after a device reset, replacement, or upgrade. This move means less downtime and more productivity for employees.
AI Agents Expose New Cybersecurity Risks
As we enter a new era of cybersecurity, CISA warns that AI is supercharging hackers, allowing them to exploit vulnerabilities at lightning speed and putting our country and economy in the crosshairs. It's time for organizations to adapt to this new wave of faster, smarter threats.
Kiteworks Fixes Code Injection Flaw in Email Protection Gateway
Kiteworks has patched a critical vulnerability in its Email Protection Gateway that could have allowed hackers to take full control of the system, and it's essential to update your software ASAP to avoid potential threats. This max-severity flaw, tracked as CVE-2026-54154, could be exploited through low-complexity attacks that require no user interaction.
Zero Trust Vulnerable to Onboarding Attacks
The often-overlooked onboarding process is a glaring weak spot in Zero Trust security, leaving companies vulnerable to attacks that exploit the "Day One window" when new hires are first brought into the environment. Stolen credentials, involved in nearly 45% of breaches, can easily be stolen during this chaotic period when service desk agents are busy activating accounts and issuing initial credentials.
Law Firm's CISO Exposes Weakness with Laughable Password
A law firm's chief information security officer inadvertently exposed a shocking security gap when he loudly questioned why his password, "r3@lg00dp@$$w0rd", was displayed on the screen. The incident revealed a larger problem that started with unpatched Windows servers and ended with a laughable password.
England's Schools Bolster Cyber Resilience
England's secondary schools are getting better at fending off cyber threats, with a significant drop in reported incidents - but the real test is in recovering quickly when attacks do happen. A recent Ofqual survey shows 27% of schools reported a cybersecurity incident in 2025/26, down from 34% in 2023/24.
[SPONSOREDNUBIVANCE]
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
Cybersecurity Leaders Struggle to Address AI Threats
A whopping 52% of business and tech leaders admit they are unprepared to tackle adversarial AI threats, citing it as their biggest cyber-preparedness gap. This alarming gap highlights the pressing need for organizations to bolster their defenses against AI-driven attacks.
UK Cybersecurity Industry Sees Sharp Drop in Female Representation
The UK's cybersecurity sector is facing a worrying trend: women now make up only 16% of the workforce, a significant drop from previous years and a stark contrast to the 48% female representation in the UK workforce as a whole. This decline is even more pronounced among senior staff, where just 12% of those with six or more years of experience are women.
Municipalities Target Robust Network Infrastructure to Drive Growth
Today, municipalities are prioritizing robust network infrastructure to fuel growth and meet rising citizen expectations. By investing in advanced technologies like AI, cities and counties can unlock new opportunities and drive economic prosperity.
CISA Warns of Pre-Auth Flaw in MikroTik RouterOS
A critical vulnerability in MikroTik RouterOS, known as CVE-2026-84411, can be exploited with a single crafted request, allowing attackers to execute code with root privileges or cause a denial-of-service condition, even without authentication. This flaw puts your network at risk, and it's essential to take immediate action to protect yourself.
AI-Discovered Vulnerabilities Skew Toward Remote Code Execution
Stay ahead of potential threats: with AI-discovered vulnerabilities, remote code execution is a growing concern, making it crucial to examine your systems for compromise before upgrading or patching. NetScaler customers, in particular, should prioritize checking their systems for signs of exploitation.
AI Coworkers Expose New Security Risks
Meet the new security challenge: AI coworkers that operate on borrowed credentials with no owner and no off switch, posing a risk that threatens to upend traditional access governance. As AI agents become more autonomous and persistent, they require robust provisioning and lifecycle controls to prevent a security nightmare.
Microsoft Bolsters Entra ID Defenses Against Script Injection Attacks
Microsoft is stepping up Entra ID security by blocking external script injections, starting mid-October 2026, to shield users from potential threats during sign-ins. This move will ensure only trusted scripts from Microsoft's content delivery network can run during authentication.
AI Augments SOC Analyst Capacity, Raises Skill Development Concerns
As AI takes on more tasks, security operations center (SOC) analysts are gaining a boost in capacity and more time to tackle complex work - but this shift also raises important questions about skill development and trust in AI. With nearly half of respondents citing greater capacity as a top impact of AI, it's clear that analysts are getting a productivity lift.