[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentCybersecurity
General cybersecurity news and analysis
Cybersecurity Experts Warn Against AI Apocalypse Narrative
Cybersecurity experts are pushing back against the narrative of an AI apocalypse, warning that the real risks are being overshadowed by exaggerated claims and doomer arguments. Juan Andres Guerrero-Saade says many warnings about AI are based on assumptions that don't add up.
Security Teams Struggle to Connect Dots in Cross-Environment Attacks
Attacks are getting more complex, with 43% of incidents spreading across four or more environments - and in some cases, as many as eight. Security teams struggle to piece together these cross-environment attacks, making it crucial to connect the dots between disparate signals.
Docker Flaw Lets Guest Code Read, Modify macOS Host Files
A newly discovered Docker flaw on macOS could allow malicious code in a virtual machine to break free from its sandbox and read or modify sensitive host files, potentially leading to code execution on the host. This vulnerability, tracked as CVE-2026-77179, leverages a weakness in the virtio-fs host server to gain unauthorized access.
Check Point Flaw Lets Unauthenticated Users Execute Code as Root
A critical flaw in Check Point's Security Management and Log Servers, rated 9.8 out of 10, allows unauthenticated users to execute code as root via a simple login request with a very long username. Fortunately, there's no evidence that this vulnerability has been exploited in the wild - yet.
Researchers Devise Method to Eavesdrop on Headphones Using Electromagnetic Signals
Meet InjectEave, a sneaky new method that lets hackers tap into your headphones from up to 30 meters away - yes, even through walls - using electromagnetic signals to steal your audio. This clever hack injects radio-frequency energy into your device, making it easy for attackers to recover your private conversations.
BIND 9 Update Fixes 14 Flaws, Including Unauthenticated Crashes
The Internet Systems Consortium has rolled out a crucial BIND 9 update that patches 14 security flaws, including unauthenticated crashes, to keep your DNS server safe and secure. Fortunately, no active exploits have been reported so far, but it's still essential to update to the latest releases: BIND 9.20.29, BIND 9.21.26, or BIND 9.20.29-S1 to fix the vulnerabilities.
Pentesting Evolves as AI Agents Close Vulnerability Gap
The vulnerability gap is widening as attackers speed up exploitation, with new vulnerabilities being weaponized in just five days, while defenders take a median of 43 days to patch - and 80% coverage is no longer enough to keep you safe.
Unbound DNSSEC Validator Flaw Enables Remote Code Execution
A critical flaw in the Unbound DNSSEC Validator, known as CVE-2026-81642, allows attackers to trigger a heap overflow, potentially enabling remote code execution on vulnerable systems. This vulnerability affects all Unbound DNS resolver releases before 1.26.1, putting countless systems at risk.
CISA Promotes Decoys to Detect Breaches
Want to catch cyber attackers in the act? Planting decoy files, accounts, and credentials inside your network can expose machine-driven threats and help you detect breaches before they cause harm.
Microsoft Sets End Date for Windows 11 24H2 Support
Mark your calendars: Windows 11 24H2 Home and Pro editions will stop receiving crucial security and non-security updates after October 13, 2026, leaving devices vulnerable to the latest threats.
Microsoft Disables Domain Login Fix Amid Windows Update Issues
If your Windows 11 device is on a corporate domain, you might be in for a frustrating login struggle - valid credentials won't work, and you'll face domain trust errors after installing September's security updates. This is because the updates cause Windows to enforce Machine Identity Isolation settings, leading to domain login failures.
CISA Deploys Cyber Decoys to Disrupt Attackers
CISA is shaking things up in the cybersecurity world with a clever tactic: deploying cyber decoys to lure in and expose attackers, making it easier to detect and respond to threats. By using these low-cost, high-impact decoys, critical infrastructure owners and operators can stay one step ahead of intruders.
Windows 11 Update Disrupts Domain Trust for Some Enterprise Users
A recent Windows 11 update, KB5124008, has caused a frustrating issue for some enterprise users, disrupting domain trust and leaving machines unable to authenticate with Active Directory. This means that even valid domain credentials are being rejected, causing headaches for administrators.
CISA Scraps Weekly Vulnerability Bulletin
Big change alert: starting September 28, CISA is ditching its weekly vulnerability bulletin to shake up its approach to cybersecurity, shifting from severity-based listings to a modern, risk-based strategy. This move aims to help prioritize vulnerabilities based on real-world risks, not just their severity.
Public Sector Braces for Identity-Based Attacks
In today's digital landscape, your identity is the key that unlocks access to all your applications and services - making it the new perimeter that public sector organizations must fiercely protect. When identity infrastructure is compromised, attackers can gain a foothold for long-term persistence and privilege escalation, putting entire operations at risk.
Browser Extensions Expose AI Assistants to Takeover Risk
Researchers found that AI assistants in popular browser extensions are vulnerable to takeover risks due to a common architecture that splits the assistant into a browser-based "body" and a server-based "brain". This setup can be exploited with just two ordinary permissions, leaving users exposed.
[SPONSOREDNUBIVANCE]
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
Parallels Desktop Flaw Exposes Macs to Root Access
A newly discovered flaw in Parallels Desktop, tracked as CVE-2026-90894, leaves Macs vulnerable to root access, allowing ordinary local accounts to run code as root. This security gap, dubbed ParaShells, was uncovered by JFrog's vulnerability team and rated 7.8 out of 10 in severity.
Ransomware Costs Exceed Ransom Payments
The real cost of ransomware goes far beyond the initial payment, with average incidents costing a whopping $5.08 million - a number that dwarfs the median ransom payment of $139,875. Downtime is a major culprit, with organizations often underestimating the hours and days of lost productivity that add up to a hefty bill.
CISA and NIST Issue Guidance to Safeguard Cloud Identity Tokens
As cyber threats escalate, protecting cloud identity tokens has become crucial - and CISA and NIST have just released guidance to help safeguard these vulnerable targets. The new interagency report provides critical advice for federal agencies, cloud service providers, and organizations that rely on them to stay secure.
Microsoft Probes Outlook Copilot Button Glitch
Microsoft has identified the culprit behind the missing Copilot button in Outlook: a pesky MAPI property that goes MIA after a recent software build, leaving users without access to this handy feature. The good news? The Outlook team is on the case, actively investigating and working to resolve the issue.
Cyber-Attacks Inflict $52,000 Average Cost on Organizations
Cyber attacks aren't just a minor setback - they can cost organizations around $52,000 on average, causing widespread disruption to services, employees, and customers. A recent report found that nearly a third of organizations globally fell victim to at least one successful cyber attack in the past year alone.
Microsoft Warns of Windows Server 2022 Support Shift Next Month
Mark your calendars: Windows Server 2022 will reach the end of its mainstream support on October 13, 2026, and will then transition to extended support, with security updates continuing through October 14, 2031.
Cybersecurity Vendors Flock to UK's SE Labs Testing Program as MITRE ATT&CK Loses Momentum
As cybersecurity threats evolve at breakneck speed, SE Labs' innovative PIVOT testing program is drawing vendors in with its rigorous, adversary-driven approach to defense testing. By simulating real-world attacks, PIVOT helps vendors strengthen their defenses against the most devastating threats.
AI-Powered Bug Hunting Spurs Surge in 2026 Vulnerability Disclosures
The AI-powered bug hunting revolution is here, and it's blowing the lid off hidden vulnerabilities - Gartner research VP Craig Lawson says we've never seen codebases audited to this level before. This unprecedented scale of audit is swiftly retiring technical debt and steering neglected code toward a cleaner state.