Cloud & Enterprise
Cloud and enterprise IT covers identity, access, SaaS, hybrid infrastructure and corporate attack surfaces. The analysis helps readers follow risks, incidents and architectural decisions relevant to complex environments.
Microsoft Issues Out-of-Band Patch for CVE-2026-96940 in Exchange Server
CVE-2026-96940 carries a CVSS 8.8 score and allows an authenticated attacker to access other users' mailboxes. Microsoft released an e…
youX: 229,226 Australian Driver's Licenses Exposed in Broker Platform Breach
The fintech platform youX exposed data on 444,538 individuals across roughly 800 brokers. Driver's license numbers, financial records,…
ThreatsDay: When Mundane System Operations Become Weapons
The October 1, 2026 ThreatsDay bulletin maps 16 stories that turn ordinary operations into attack vectors. The real risk is the banali…
Citrix and Kiteworks: Two Opposite Zero-Days, No Standard Governs the Response
Citrix patched two actively exploited NetScaler zero-day RCEs days after attacks began. Kiteworks urged customers to shut down systems…
GitLab Patches Critical RCE in AI Gateway: Self-Hosted Deployments at Risk
CVE-2026-90970, rated CVSS 9.9, allows authenticated users with Duo Agent Platform access to escape the prompt template sandbox and ex…
Dell CSM: Two CVSS 10 Flaws Grant Attackers Full Administrative Control
Dell has patched two maximum-severity vulnerabilities in Container Storage Modules. An unauthenticated attacker can bypass access cont…
Wiz's Blue Agent Reconstructs GitHub-to-AWS Attack Chain in Minutes
An autonomous AI investigator correlated signals across three platforms in minutes to reconstruct a cross-platform data exfiltration c…
Keio Ransomware: Trains Run On Time, Hotels and Retail in Chaos
Keio Corporation confirmed a ransomware attack on September 26, 2026. Train operations were unaffected, but the group's hotel and reta…
Bank of Korea Data Leak Exposes 186 Staff via E-Learning Vendor's GitHub
South Korea's central bank faces parliamentary scrutiny after personal data of 186 employees was exposed for 31 days through a third-p…
AI Agent Memory Has Become an Ungoverned Attack Surface
Coding agents store API keys and credentials in plain text. Agent memory becomes a target for persistent attacks via plugins and MCP,…
Kiteworks Orders Server Shutdown After Federal Intelligence Warns of Imminent Attack
Kiteworks instructed customers to power down servers for six hours following credible threat intelligence from federal authorities. No…
Warner and Cruz Propose Voluntary Telecom Security Framework
U.S. Senators introduce the Telecommunications Cybersecurity and Resilience Act, replacing mandatory FCC rules with a voluntary best-p…