Posts

Showing posts from August, 2026

Your Atlassian Data Trains Their AI Unless You Pay Enterprise Rates

Your incident response plan was designed for a threat that no longer exists

Two Hours Is the New Window

The SECURE Data Act would replace every state privacy law with a single federal standard

CVSS 10.0 Doesn't Happen Often. Metabase Earned It.

CREDENTIALS IN CLIENT-SIDE JAVASCRIPT, TWICE: THE NOVO NORDISK AI ECOSYSTEM BREACH

CVE-2026-68820: The Patch Is Out, the Timeline Isn't

When a Password Reset Won't Help

An npm worm poisoned 444 packages in under four hours

Iranian State Actors Are Disabling U.S. Critical Infrastructure Safety Systems

Patch Bypassed on Day One: The N-Central CVE-2026-18577 Zero-Day

Microsoft Exchange Zero-Day: No Patch, Active Exploitation, Vendor Silence