Manager Pressing REMOTE MONITORING AND MANAGEMENT

(Adobe Stock Images)

Phishing campaign targets widely used RMM platforms in 46 countries

Steve ZurierSeptember 3, 2026

Phishing attacks trick victims into installing legitimate RMM tools for remote access.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Identity
Ping YOUniverse: How AI lets identity management go ‘headless’
Identity
Ping YOUniverse: Restoring trust in both humans and AI agents

PODCASTS

IoT
Linux Threat Hunting – PSW #942
Leadership
Preventing Wire Fraud and 2 Interviews From BH USA 2026 From Optiv Security and Kai – Todd Sorrel, John Hurley, Galina Antova – BSW #463
Vulnerability Management
Victorians, TONIC, RevStealer, Fireant, OpenClaw, PowerShell, SuperBox, Aaran Leyland – SWN #612
Application security
Fixing Software Weaknesses Rather Than Just Finding More Flaws – Nidhi Aggarwal, Gil Geron, Braden Russell – ASW #398
Data Security
Life as a CISO in Hollywood: Keeping New Films Leak-Free & 4 Black Hat Interviews – Dan Meacham, John Hultquist, Ronan Murphy, Ellen Boehm, Frank Vukovits – ESW #474

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

(Credit: frank – stock.adobe.com)

Grafana fixes critical SSRF flaw affecting Grafana MCP servers

Laura FrenchSeptember 3, 2026

An MCP caller could potentially reach unintended internal services leveraging the MCP server’s network position.

Vulnerability Management

SonicWall advises customers to patch two new SMA1000 zero-days

Steve ZurierSeptember 2, 2026

Attackers are chaining two SonicWall SMA1000 zero-days to gain remote code execution.

Threat Management

Microsoft identifies ‘TerminalFix’ campaign spreading Python reverse tunnel

Laura FrenchSeptember 2, 2026

The campaign uses DLL sideloading and PNG steganography to evade detection.

Caution screen concept

Application security

JFrog Artifactory flaw exploited days after patch release

Steve ZurierSeptember 1, 2026

Attackers exploited a JFrog Artifactory flaw days after its patch, threatening software supply chains.

RevStealer malware spread through fake Claude Opus 5 download

Laura FrenchSeptember 1, 2026

The Windows infostealer uses several evasion measures to remain mostly invisible to security systems.

China map outline, flag colors red, yellow glowing. Futuristic circuit board digital technology backdrop. High-tech data streams, innovation, modern design, connectivity global network.

Critical Infrastructure Security

China-linked campaign targets high-value networks, critical infrastructure

Steve ZurierAugust 31, 2026

Fire Ant targets routers and authentication systems to spy, steal credentials and evade detection.

Vulnerability Management

PaperCut issues emergency patches for actively exploited critical vulnerability

Laura FrenchAugust 28, 2026

Two flaws in the print management software could enable unauthenticated RCE.

1,200 OpenAI agents colluded to cheat evaluations in lead-up to Hugging Face attack

Laura FrenchAugust 28, 2026

OpenAI and more than 100 other organizations are now calling for urgent collective action on cyber defense.

Events