Your MSP’s Backup Console Got Rooted and the Patch Does Nothing
AhsayCBS backup consoles are getting rooted by a no-creds exploit chain, and the version Ahsay shipped as the fix closes neither flaw. The call is coming from inside the MSP.
Read Full News
Atlassian Just Handed Strangers Your WEB-INF and CISA Put It on the Calendar
Unauthenticated file read across eight Atlassian Data Center products. KEV on October 15, due October 18. Patch, mitigate, rotate Crowd secrets.
GitHub Security Lab Shipped gh-secure So You Can Stop Shipping Open Source Naked
gh extension install GitHubSecurityLab/gh-secure. Dry-run, then enable the boring defaults. Green toggles are not a force field, but naked repos are worse.
Hunt SAWFLY and BARECLAW on BeyondTrust After CVE-2026-102764
Public Mandiant IOCs turned into lab greps: mangoapi.php, _c94mfe, ingredi_ws, /uidchanarge, zz-root-persist. Patch first. Hunt off-box logs. Rebuild if trust is gone.
That Party RSVP Installs ScreenConnect, Not Confetti
Vague invite, baby-domain CAPTCHA, zip, legitimate remote-support installer. Your tray icon is their shell.
The Ransomware Negotiator Got Arrested and the Industry Is Suddenly Quiet
Allegations, sealed complaint, conference arrest. The industry that sells ‘we talk to criminals so you do not have to’ just got a governance wake-up call.
Everyone Is Shipping an AI Pentester. Most of Them Are Expensive Autocomplete.
GitHub is drowning in agentic security tools. Some prove the bug. Most are a chatbot with a scanner bolted on. Here is what actually shipped this week.
SonicWall SMA1000 Hit a CVSS 10 SSRF Again, and Scanners Showed Up in Two Days
Third max-severity WorkPlace SSRF since July. Patch day October 6, scanners by October 8. The September hotfix builds are now the affected ones.
Data Centers Are War Targets Now and Dual-Use Is the Whole Punchline
Commercial racks hosting military gravity put civilian apps in the outage radius. Separate stacks, diversify regions, update the BCP slide.
Your Cheap Android Was Compromised Before You Turned It On
Midnight Mimosa ships in the firmware of cheap MediaTek Androids. You cannot uninstall it. Ad fraud and residential proxies are the business model.