News

Today’s Stories, Governance Lens — September 17, 2026 Coffee Break: Armed Madhouse – Ocean Presence: A New Model of Naval Power — Nakedcapitalism.com Java 27 Tackles Post-Quantum Security and a Faster Patch Cadence — DevOps.com Thai Broadband Provider Hacked via Fortinet Vulnerability — Securityweek.com Cisco and the DISA STIG: Turning Zero Trust Policy into Repeatable Practice – Part 2: Cisco SNA — Cisco.com CISA: Critical VMware RCE flaw now exploited by ransomware gangs — BleepingComputer Cisco patches actively exploited email gateway zero-day (CVE-2026-76461) — Help Net Security Made in China, flying for Britain: Who really knows what’s inside our defense tech? — TechRadar The AI Threat Multiplier: Securing Mobile Apps in the Automated Era - Ryan Lloyd, Jason Cortlund - ASW #400 — Libsyn.com Cybersecurity for kids: 9 rules to stop online predators and scams — The-digital-reader.com Cisco patches Secure Email Gateway zero-day exploited in attacks — BleepingComputer Cybersecurity threats continue to evolve, impacting businesses worldwide. ...

Cybersecurity Headlines — September 17, 2026 Coffee Break: Armed Madhouse – Ocean Presence: A New Model of Naval Power — Nakedcapitalism.com Java 27 Tackles Post-Quantum Security and a Faster Patch Cadence — DevOps.com Thai Broadband Provider Hacked via Fortinet Vulnerability — Securityweek.com Cisco and the DISA STIG: Turning Zero Trust Policy into Repeatable Practice – Part 2: Cisco SNA — Cisco.com CISA: Critical VMware RCE flaw now exploited by ransomware gangs — BleepingComputer Cisco patches actively exploited email gateway zero-day (CVE-2026-76461) — Help Net Security Made in China, flying for Britain: Who really knows what’s inside our defense tech? — TechRadar The AI Threat Multiplier: Securing Mobile Apps in the Automated Era - Ryan Lloyd, Jason Cortlund - ASW #400 — Libsyn.com Cybersecurity for kids: 9 rules to stop online predators and scams — The-digital-reader.com Cisco patches Secure Email Gateway zero-day exploited in attacks — BleepingComputer From the Trenches As a cybersecurity practitioner, I’ve been keeping an eye on the latest developments in the field, and there are two stories that caught my attention today. First up is the patching of CVE-2026-76461 by Cisco for their Secure Email Gateway, which has already been actively exploited in attacks. This is a stark reminder of the importance of timely patching, especially when it comes to email gateways. With the increasing sophistication of attackers and the rise of ransomware gangs, it’s crucial that organizations prioritize patching these vulnerabilities ASAP. ...

Today’s Stories, Governance Lens — September 16, 2026 Cisco patches Secure Email Gateway zero-day exploited in attacks — BleepingComputer Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution — Internet KUMO-Domain-Recon-Tool — Kitploit.com US-China Strategic AI Dialogue (SAID) Proposal — Sinocism.com Cybersecurity jobs available right now: September 15, 2026 — Help Net Security ENISA: Frontier AI Is Changing the Speed of Cyberattacks. Europe Needs to Catch Up — Securityaffairs.com China Calls Amodei’s AI Proposal a New Cold War Playbook — Securityaffairs.com Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries — Internet CISA warns hackers are exploiting max severity GitLab flaw — urges all businesses to patch immediately — TechRadar For AI leaders Doom is a form of hype — Erkansaka.net The increasing sophistication of cyberattacks poses significant business risks to organizations, particularly those with high-value intellectual property or sensitive data. ...

Cybersecurity Headlines — September 16, 2026 Cisco patches Secure Email Gateway zero-day exploited in attacks — BleepingComputer Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution — Internet KUMO-Domain-Recon-Tool — Kitploit.com US-China Strategic AI Dialogue (SAID) Proposal — Sinocism.com Cybersecurity jobs available right now: September 15, 2026 — Help Net Security ENISA: Frontier AI Is Changing the Speed of Cyberattacks. Europe Needs to Catch Up — Securityaffairs.com China Calls Amodei’s AI Proposal a New Cold War Playbook — Securityaffairs.com Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries — Internet CISA warns hackers are exploiting max severity GitLab flaw — urges all businesses to patch immediately — TechRadar For AI leaders Doom is a form of hype — Erkansaka.net From the Trenches I’ve been seeing a lot of activity around vulnerabilities lately, and it’s clear that attackers are getting more sophisticated by the day. Take the recent exploit of a zero-day in Cisco’s Secure Email Gateway, for example. This flaw was being actively exploited in real-world attacks, allowing attackers to gain root command execution on compromised systems. It’s a stark reminder that even the most secure systems can be vulnerable to exploitation if not properly patched. ...

Today’s Stories, Governance Lens — September 15, 2026 Cybersecurity attention fades within months after a breach — 18.133 AWS puts AI vulnerability detection to the test, and false positives pile up — Help Net Security ARES — Kitploit.com Hackers exploit Tencent app flaw to deploy GrayRabbit malware — BleepingComputer Security Affairs newsletter Round 594 by Pierluigi Paganini – INTERNATIONAL EDITION — Securityaffairs.com Week in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploited — 18.133 CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV — Internet Anthropic CEO says AI swarm could ‘take over the entire Internet’ in 6-12 months, commits to AI slowdown plan — VentureBeat AI-driven ‘worms’ that learn on the fly are the latest potential threat to your devices, researchers say — CBC News (7) Misleading Metaphors, Real Risks - by Melanie Mitchell — Substack.com Cybersecurity attention fades within months after a breach: This decline in awareness is concerning because it suggests that security incidents are becoming more frequent and severe, but also that organizations may not be taking adequate measures to prevent or respond to these breaches. As a result, the risk of future breaches increases, putting sensitive data at risk. A CISO should consider revising incident response plans to ensure they include timely communication with stakeholders and the public. ...

Cybersecurity Headlines — September 15, 2026 Cybersecurity attention fades within months after a breach — 18.133 AWS puts AI vulnerability detection to the test, and false positives pile up — Help Net Security ARES — Kitploit.com Hackers exploit Tencent app flaw to deploy GrayRabbit malware — BleepingComputer Security Affairs newsletter Round 594 by Pierluigi Paganini – INTERNATIONAL EDITION — Securityaffairs.com Week in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploited — 18.133 CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV — Internet Anthropic CEO says AI swarm could ‘take over the entire Internet’ in 6-12 months, commits to AI slowdown plan — VentureBeat AI-driven ‘worms’ that learn on the fly are the latest potential threat to your devices, researchers say — CBC News (7) Misleading Metaphors, Real Risks - by Melanie Mitchell — Substack.com From the Trenches As a cybersecurity practitioner, I’ve seen my fair share of breaches and vulnerabilities, but some trends are concerning nonetheless. Take, for instance, the fact that security attention fades within months after a breach (18.133). This is a classic case of the “breach response fatigue” phenomenon, where organizations rush to patch vulnerabilities only to lose momentum soon after. It’s crucial for companies to maintain a proactive approach to cybersecurity, rather than just reacting to incidents. ...

Today’s Stories, Governance Lens — September 14, 2026 CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV — Internet Anthropic CEO says AI swarm could ‘take over the entire Internet’ in 6-12 months, commits to AI slowdown plan — VentureBeat AI-driven ‘worms’ that learn on the fly are the latest potential threat to your devices, researchers say — CBC News (7) Misleading Metaphors, Real Risks - by Melanie Mitchell — Substack.com One HTTP Request, Every File on the Server: GitLab’s CVSS 10 Commits-API Flaw Hits Active Exploitation Within Hours — Forkast.news Jensen Huang Says Cybersecurity Is AI’s Next Blockbuster App. CrowdStrike Is Already Building It With Nvidia — Yahoo Entertainment Anthropic Says Iran-Linked Actor Used Claude to Compile U.S. Navy Targeting Data — gcaptain.com AI-powered fraud is becoming personal: How cybercriminals are exploiting trust at unprecedented scale — Digital Journal Remembrance, Resilience, and 911 Advances in Public Safety — Bradenkelley.com America built a fortress after 9/11. Then the threat started hiding in plain sight — Fox News The U.S. Department of Commerce’s CISA has added five actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) list, including flaws in Artifactory, ScreenConnect, and RouterOS. This move highlights the increasing threat landscape for businesses and highlights the need for a proactive risk management approach. ...

Cybersecurity Headlines — September 14, 2026 CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV — Internet Anthropic CEO says AI swarm could ‘take over the entire Internet’ in 6-12 months, commits to AI slowdown plan — VentureBeat AI-driven ‘worms’ that learn on the fly are the latest potential threat to your devices, researchers say — CBC News (7) Misleading Metaphors, Real Risks - by Melanie Mitchell — Substack.com One HTTP Request, Every File on the Server: GitLab’s CVSS 10 Commits-API Flaw Hits Active Exploitation Within Hours — Forkast.news Jensen Huang Says Cybersecurity Is AI’s Next Blockbuster App. CrowdStrike Is Already Building It With Nvidia — Yahoo Entertainment Anthropic Says Iran-Linked Actor Used Claude to Compile U.S. Navy Targeting Data — gcaptain.com AI-powered fraud is becoming personal: How cybercriminals are exploiting trust at unprecedented scale — Digital Journal Remembrance, Resilience, and 911 Advances in Public Safety — Bradenkelley.com America built a fortress after 9/11. Then the threat started hiding in plain sight — Fox News From the Trenches As a cybersecurity practitioner, I’m seeing a growing concern about the rise of AI-driven threats that can learn on the fly. The recent news that researchers are warning about “worms” that can adapt to evade detection is unsettling. These types of threats pose a significant challenge to traditional security measures and highlight the need for more advanced threat intelligence capabilities. ...

Today’s Stories, Governance Lens — September 13, 2026 AI-driven ‘worms’ that learn on the fly are the latest potential threat to your devices, researchers say — CBC News (7) Misleading Metaphors, Real Risks - by Melanie Mitchell — Substack.com One HTTP Request, Every File on the Server: GitLab’s CVSS 10 Commits-API Flaw Hits Active Exploitation Within Hours — Forkast.news Jensen Huang Says Cybersecurity Is AI’s Next Blockbuster App. CrowdStrike Is Already Building It With Nvidia — Yahoo Entertainment Anthropic Says Iran-Linked Actor Used Claude to Compile U.S. Navy Targeting Data — gcaptain.com AI-powered fraud is becoming personal: How cybercriminals are exploiting trust at unprecedented scale — Digital Journal Remembrance, Resilience, and 911 Advances in Public Safety — Bradenkelley.com America built a fortress after 9/11. Then the threat started hiding in plain sight — Fox News Why Continuous Application Security Testing Is No Longer Optional — Dzone.com Claude Used to Automate Exploitation and Data Theft Across Multiple Victims — Internet The increasing use of AI-driven malware poses a significant business risk as it can learn on the fly, making traditional signature-based detection methods ineffective. This shift in threat landscape highlights the need for organizations to implement robust AI-powered security solutions and invest in ongoing research to stay ahead of emerging threats. ...

Cybersecurity Headlines — September 13, 2026 AI-driven ‘worms’ that learn on the fly are the latest potential threat to your devices, researchers say — CBC News (7) Misleading Metaphors, Real Risks - by Melanie Mitchell — Substack.com One HTTP Request, Every File on the Server: GitLab’s CVSS 10 Commits-API Flaw Hits Active Exploitation Within Hours — Forkast.news Jensen Huang Says Cybersecurity Is AI’s Next Blockbuster App. CrowdStrike Is Already Building It With Nvidia — Yahoo Entertainment Anthropic Says Iran-Linked Actor Used Claude to Compile U.S. Navy Targeting Data — gcaptain.com AI-powered fraud is becoming personal: How cybercriminals are exploiting trust at unprecedented scale — Digital Journal Remembrance, Resilience, and 911 Advances in Public Safety — Bradenkelley.com America built a fortress after 9/11. Then the threat started hiding in plain sight — Fox News Why Continuous Application Security Testing Is No Longer Optional — Dzone.com Claude Used to Automate Exploitation and Data Theft Across Multiple Victims — Internet From the Trenches As a cybersecurity practitioner, I’ve been following the latest developments in the field with great interest. Two stories that caught my attention are the emergence of AI-driven ‘worms’ that learn on the fly and the critical vulnerability in GitLab’s Commits-API. ...