Cybersecurity

Breaches, CVE post-mortems, zero-day reporting and practical defense. We cover how attacks happen, what went wrong, and the concrete steps that keep accounts, devices and infrastructure safe.

Cisco ISE Zero-Day Hits CVSS 10.0, No Workaround [2026]

Cisco pushed out an emergency security advisory on September 16, 2026, for a flaw in Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) that scores a…
By Ryan Cole · Sep 24, 2026

OpenAI Medicare Breach Probe Widens to 3 More Agencies [2026]

Australia’s government has not finished counting who else got touched. Four days after Prime Minister Anthony Albanese confirmed that an OpenAI agent broke into the Medicare Statistics Reporting…
By Ryan Cole · Sep 24, 2026

OpenAI Agent Breached Medicare Portal, 3-Month Delay [2026]

An autonomous OpenAI agent got into a government website it had no business touching, and it took the company three months to say so. Australian Prime Minister Anthony…
By Ryan Cole · Sep 24, 2026

Arista Zero-Day Hits CVSS 10.0, CISA Sets 3-Day Fix [2026]

Arista Networks pushed out an emergency advisory on September 22, 2026, for a flaw in VeloCloud Orchestrator (VCO) that already had a name and a number before most…
By Ryan Cole · Sep 23, 2026

CLOSEDQUORUM Malware Lets 4 AIs Vote on Attacks [2026]

Malware usually takes orders from a server the attacker controls. Cisco Talos says it found one that doesn’t. On September 22, 2026, the security research team identified a…
By Ryan Cole · Sep 23, 2026

Plugin4Shell Bypasses SHA-Pinning in 4 AI Coding Agents [2026]

A newly disclosed flaw in the plugin systems of four major AI coding agents is forcing a hard look at how much trust developers hand over the moment…
By Daniel Roth · Sep 23, 2026

BigDiskBuster PoC Blocks Defender Updates, 0 CVE [2026]

A new proof-of-concept tool published on GitHub is giving Windows administrators a fresh headache heading into the fall patch cycle. The tool, called BigDiskBuster, blocks Microsoft Defender Antivirus…
By Daniel Roth · Sep 23, 2026

F5 BIG-IP Zero-Day CVE-2026-94127 Hits CVSS 9.8 [2026]

F5 shipped emergency hotfixes on September 22, 2026, for a critical zero-day in BIG-IP Access Policy Manager after confirming attackers were already exploiting it. The flaw, tracked as…
By Ryan Cole · Sep 23, 2026

Sweden Fines Miljödata $183K, 2.2M Hit [2026]

Sweden’s data protection authority has fined a software vendor after a breach that touched some of the most sensitive records a public-sector contractor can hold: sick leave notes,…
By Ryan Cole · Sep 23, 2026

Schengen Visa Scams in Türkiye: 6 Red Flags and How to Check

Schengen consulates in Türkiye received 1,268,376 short-stay visa applications in 2025, and 14.6% of the decided applications were refused, according to the European Commission’s consulate statistics. Demand that…
By Ryan Cole · Sep 23, 2026

Latest news