Advisories

Vulnerabilities, security writing, standards and rules as they were filed.

NameByWhereWhen
What are the top 5 best ever products / apps / OSes all time that you have used?spiceworks.com3d ago
Apple's ridiculous printer security policyspiceworks.com3d ago
[INFO] TigerByte Cyber Emerges From Stealth With $3 Million in Fundingthreatfilter.dev3d ago
Creating database for windows server search index on another serverspiceworks.com3d ago
Sell your Apple stock now!spiceworks.com3d ago
Stupid Friday ?'s | 9/18/2026spiceworks.com3d ago
[INFO] Identity Visibility in 2026: The Foundation of Identity Securitythreatfilter.dev3d ago
Suse Linux DHCP with a catchspiceworks.com3d ago
Patch Tuesday - Again, largest ever!spiceworks.com3d ago
[INFO] Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flawsthreatfilter.dev3d ago
[HIGH] SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCEthreatfilter.dev3d ago
Daily Challenge - 40Gbps Ethernet Physical Connections - 2026-Sep-16spiceworks.com3d ago
[CRITICAL] Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wildthreatfilter.dev3d ago
Daily Challenge - Windows Equivalent Command to Linux Chmod 775 - 2026-Sep-18spiceworks.com3d ago
[INFO] Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Upthreatfilter.dev3d ago
[INFO] CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositoriesthreatfilter.dev3d ago
[CRITICAL] CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wildthreatfilter.dev3d ago
Sound off and win a Devil Duck Bluetooth speaker (US & Canada)spiceworks.com4d ago
A long-running Active Directory environment appeared healthy until adding a new domain controller exposed years of stale DNS records that standard diagnostics and AI troubleshooting failed to identifyspiceworks.com4d ago
It's Read/Only Friday! 18 September, 2026spiceworks.com4d ago
Tilly Norwood glitches out and starts speaking Chinese mid interviewspiceworks.com4d ago
Wrong Answers Only: What does HR say about this whole “Zero Trust” thing?spiceworks.com4d ago
The app that doesn't existspiceworks.com4d ago
New Voice of IT Survey! Tell the world what you think about your business ISPspiceworks.com4d ago
Games on Tap! - 2026.09.18spiceworks.com4d ago
Defender detections on the AMD AIM-T Manageability package :: Sept 2026spiceworks.com4d ago
[INFO] Friday Squid Blogging: On Squid Egg Sacsthreatfilter.dev4d ago
Linux Security Roundup: Patch BIND, Browsers, and Cloud Kernels Firstlinuxsecurity.com4d ago
[INFO] TestFlight Updatethreatfilter.dev4d ago
[INFO] Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacksthreatfilter.dev4d ago
Linux Packet Metadata Could Point to Headers That No Longer Existlinuxsecurity.com4d ago
Linux eBPF Security Flaw Could Approve an Out-of-Bounds Memory Accesslinuxsecurity.com4d ago
Recommendations for ERP MES MRP QMS?spiceworks.com4d ago
Tilly Norwood glitches out and starts speaking Chinese mid interviewspiceworks.com4d ago
[CRITICAL] Cisco Zero-Day Highlights API Endpoint Authentication Issuesthreatfilter.dev4d ago
[INFO] EY Survey Finds Autonomous AI Implementation Outpaces Oversightthreatfilter.dev4d ago
[INFO] MFA Won't Save You From OAuth Consent Abusethreatfilter.dev4d ago
[INFO] Public Exploits Released for Four Linux Kernel Flaws That Enable Local Rootthreatfilter.dev4d ago
It's Read/Only Friday! 18 September, 2026spiceworks.com4d ago
[INFO] Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Tiesthreatfilter.dev4d ago
[INFO] Xcode 27.1 beta (27A9269)threatfilter.dev4d ago
[INFO] New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Executionthreatfilter.dev4d ago
Snap!-lite -- The CIA, Claud hacks OpenAI, NASA picks Boeingspiceworks.com4d ago
I knew it would go over like a f@rt in church but I had to tryspiceworks.com4d ago
A long-running Active Directory environment appeared healthy until adding a new domain controller exposed years of stale DNS records that standard diagnostics and AI troubleshooting failed to identifyspiceworks.com4d ago
Should you read the code, is RAG dead, and did Skills kill MCP?github.blog4d ago
Defender detections on the AMD AIM-T Manageability package :: Sept 2026spiceworks.com4d ago
Windows Hello Issue with personal devicespiceworks.com4d ago
Stupid Friday ?'s | 9/18/2026spiceworks.com4d ago
Today's articles: Realistic IT career expectations and over engineered IT infraspiceworks.com4d ago

Latest

Temporary Fire Safety Orders - Z Appreciation day 2026spiceworks.comCan I export iMessage Texts from one iCloud to another?spiceworks.comEaton Swag Day!spiceworks.comSpark! Pro series - 18th September 2026spiceworks.comGames on Tap! - 2026.09.18spiceworks.comThe app that doesn't existspiceworks.comWhat did you learn this week? (storms and flowers)spiceworks.comEthical AI for Enterprises: Why Responsible AI Usage is the Way Forwardeccu.eduMigrating the GitHub Copilot runtime to Rust, using Copilotgithub.blogOracle September 2026 Critical Security Patch Update addresses 672 CVEsResearch Special Operationsfeedburner.comAustralia is replacing the Essential Eight with a new cyber framework. Here’s how exposure management can help you get ahead of it.Ben Mudiefeedburner.comMarketing ops as code: Automating events from planning to follow-up on GitHubgithub.blog

More

  1. GitHub Copilot app for Beginners: Using the diff, terminal, and browsergithub.blog
  2. Tenable Ranks #1 in Device Vulnerability and Exposure Management for Eighth Consecutive YearShannon O'Dowdtenable.com
  3. Detection scaled. The loop did not.Asaf Saarmend.io
  4. The agentic harness for Tenable Hexa AI: How Tenable prevents AI agents from going off the railsRaj Agrawalfeedburner.com
  5. GitHub availability report: August 2026github.blog
  6. Introducing the CyberAgents Exchange AI Inspector: Rigorous review for community-built AIMark Beblowfeedburner.com
  7. Feed your AIfeeder.co
  8. Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)Research Special Operationsfeedburner.com
  9. Claude Mythos 5 is coming to Tenable One, powering the new “Adversary View”Eric Doerrfeedburner.com
  10. Tenable to Bring Claude Mythos 5 into the Tenable One Exposure Management PlatformShannon O'Dowdtenable.com
  11. StyleSmuggler (CVE-2026-75650): Frequently asked questions about Adobe Commerce and Magento zero-daySatnam Narangfeedburner.com
  12. Shai-Hulud in the Wild: What Security and Incident Response Teams Need to KnowSygniasygnia.co
  13. Project HydraFusion: Frontier quality via multi-model orchestrationgithub.blog
  14. Mend Renovate Enterprise: managing dependencies at agentic scaleIris Kaminermend.io
  15. Tenable Uses OpenAI GPT Cyber Models to Help Defenders Inspect Community-Built AI ComponentsShannon O'Dowdtenable.com
  16. mailing-lists:distros:stats:2026 - wiki formatting fix in one of the new entriessolaropenwall.org
  17. mailing-lists:distros:stats:stats-202608.txt - createdsolaropenwall.org
  18. GitHub Copilot app for Beginners: Run several agents at oncegithub.blog
  19. Decoding the new AI lingo: Loops, harnesses, squads, hill climbing… oh my!github.blog
  20. How we make AI coding more cost efficient without sacrificing task qualitygithub.blog
  21. Tenable Joins White House-Led Project Watershed to Bolster U.S. Water Systems CybersecurityShannon O'Dowdtenable.com
  22. Exfiltration in Plain Sight: How the SafePay Ransomware Group Abused OneDrive to Steal DataSygniasygnia.co
  23. Sygnia Reveals New Activity by China-Nexus Threat Actor Fire Ant Targeting Trusted InfrastructureSygniasygnia.co
  24. Mini Shai-Hulud hits openapi-react-query-codegen: 10 malicious npm versionsAlina Podobamend.io
  25. Why a cryptographic inventory is key for addressing the quantum computing threatChristopher Dayfeedburner.com
  26. OpenClaw went viral. Meet the maintainers building and securing it.github.blog
  27. How to build an exposure management program the business trusts: Lessons from Tenable’s CSORobert Huberfeedburner.com
  28. Fire Ant Evolves: From Hypervisors to Trusted InfrastructureSygniasygnia.co
  29. The skill layer is a dependency problem without a lockfile: what the OWASP Agentic Skills Top 10 gets rightAsaf Saarmend.io
  30. Edge infrastructure under siege: what two independent datasets reveal about who's exploiting your perimeterResearch Special Operationsfeedburner.com