Mar 20, 2026
The real story isn't the CVE. It's what the disclosure timeline tells you about your detection assumptions.
Mar 13, 2026
Plus: FortiGate configs are handing attackers your AD keys. Office Preview Pane executes code without a click.
Mar 6, 2026
Plus: 40% of breaches required no authentication. Your Google Calendar is a C2 channel.
Feb 27, 2026
Plus: BeyondTrust's second critical RCE in a year. CISA at 38% capacity.
Feb 20, 2026
Plus: Copilot turns attack vector. Chrome's first zero-day of 2026.
Feb 13, 2026
Plus: First malicious Outlook add-in. Apple's first zero-day of 2026.
Jan 30, 2026
Fortinet disabled cloud SSO, an Office zero-day bypassed warnings, and 72M consumer records hit the dark web.
Jan 23, 2026
Plus: AI assistants leaking data and why hiring just became an identity risk.
Jan 16, 2026
Plus: The 8 Patch Tuesday flaws attackers chain after initial access.
Jan 9, 2026
Plus: NIST asks for help securing AI agents. Non-human identities are the new attack surface