Cloud & Enterprise
Cloud and enterprise IT covers identity, access, SaaS, hybrid infrastructure and corporate attack surfaces. The analysis helps readers follow risks, incidents and architectural decisions relevant to complex environments.
US Air Force Pilots Bought USB Drives From Kabul Markets for Mission Planning in Afghanistan
A former Air Force IT security chief reveals that pilots in the early 2000s purchased USB drives from local Afghan vendors to move mis…
CenterPoint: Data of 1 Million Texans Exposed, No Customer Notice Issued
The Texas Attorney General confirms a CenterPoint Energy breach affecting 1,062,060 residents, compromising names, addresses, Social S…
Cisco SEG Under Siege: Third Zero-Day in a Year, Root via Email
Cisco fixes CVE-2026-76519 in Secure Email Gateway: CVSS 9.8 and active exploitation. A crafted email attachment can enable commands w…
Vghost: Tencent's AI Finds Linux Kernel vhost Flaw in Two Hours
CVE-2026-74580, dubbed Vghost, is a Linux kernel vhost subsystem vulnerability discovered with Tencent's Corvus AI multi-agent system.…
Chrome and Firefox: 114 Vulnerabilities Patched as Mozilla Launches Firefox Enterprise
On October 14, 2026, Google and Mozilla released security updates fixing a combined 114 vulnerabilities — 37 in Chrome 155 and 77 in F…
Ransomware Gets Personal: 37% of Attacks Now Include Direct Threats Against Staff
A Semperis survey of 1,200 organizations hit by ransomware in the first half of 2026 finds that 37% of attacks involved psychological…
471 Million Breach Notices, But Only 24% Say How It Happened
In the first half of 2026, U.S. residents received 471.2 million data breach notifications, surpassing the full-year 2025 total of 297…
Meta Notifies 1,500 People After GitHub Breach Exposes Personal Data and Source Code
Meta is notifying roughly 1,500 individuals, mostly U.S. employees, after an unauthorized GitHub repository access via stolen employee…
Vercel Sandbox: AI Agents Bypass Network Restrictions via Manipulated Certificates
AIR researchers have demonstrated a vulnerability in the Vercel Sandbox that allows confined AI agents to exfiltrate sensitive data by…
AI Agent Re-grades 10,000 Cloud Alerts: Three-Quarters Had the Wrong Severity
Sola Security study of 9,967 HIGH findings: 58.5% downgraded, 16.6% upgraded. Static CSPM vendor severities do not reflect real risk i…
Phishing Now Strikes Twice: The Human and the AI Assistant
Barracuda Research has documented phishing campaigns that exploit HTML comments, invisible CSS, and zero-width characters to manipulat…
Check Point: Attacks Up 48% YoY as AI Becomes Standard Offensive Tooling
The October 12, 2026 Threat Intelligence Report documents 2,803 weekly attacks per organization and the convergence of generative AI w…