Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers
In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol delivered. Thousands of developers built servers, and enterprises plugged them into agent workflows. The ecosystem around it fell short. Earl
CISO perspectives on managing vulnerability risks in the age of AI
Learn how CISOs can mitigate cybersecurity risks and increase resilience in the age of AI-powered vulnerability management.
Hackers exploit 32 zero-days on first day of Pwn2Own Ireland
On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32 zero-days.
Zombie instructions on carefully constructed web pages could trick GitHub Copilot CLI into sharing secrets
GitHub Copilot CLI may reveal developer secrets if it comes across instructions that tell it to do so, depending on the underlying model. The coding agent tool was flagged earlier this year for being susceptible to indirect prompt injection. That's when a model ingests text from a source other than
Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, means researchers can no longer submit security flaws in the code of projects such as Go, Angular, and Protocol Buffers there for a reward.
US stocks: US software shares scale fresh 2026 highs as AI disruption worries fade
US software stocks are witnessing robust growth, fueled by optimistic earnings projections and partnerships in AI. Major players like Salesforce and Accenture have showcased impressive earnings, aiding the sector's revival. Analysts suggest that fears of AI d
Microsoft Exchange flaw allows hackers to read mailboxes across an organization, so patch now
Microsoft issues fix for CVE-2026-96940, a high-severity Exchange privilege-escalation flawAttackers with compromised user credentials could access other employees’ mailboxes and ema
ISC2 Launches Academic Advisory Council to Strengthen Global Cybersecurity Education and Workforce Readiness
Collaborative initiative brings together academic and industry leaders to ensure students are ready for cyber jobs in an AI-driven workplace ALEXANDRIA, Va., Oct. 6, 2026 /PRNewswire/ -- ISC2 – the world's leading nonprofit member organization for cybersecuri
Atlassian warns of critical file-access flaw in Jira, Confluence
Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket.
IBM and Red Hat patch 400-plus unknown Java flaws, open Clearinghouse for fix requests
IBM Corp. and its Red Hat unit said today that their Lightwell open-source security program has found and fixed more than 400 previously unknown vulnerabilities in widely used Java libraries. The companies also made Lightwell Clearinghouse generally available
Tuesday, October 6, 2026
KFF Health News is a national newsroom that produces in-depth journalism about health issues and is one of the core operating programs at KFF—an independent source of health policy research, polling, and journalism. Learn more about KFF. This article first ap
Epic Says MyChart Flaws Could Leave Patient Record Access Out of Audit Logs
Audit logs are how a health system shows who opened patient records. Epic says some MyChart configurations could leave that access unrecorded, which puts a harder question in front of every Epic security team. Source: Epic Says MyChart Flaws Could Leave Patie