Cybersecurity
Standard Chartered Bakes Zero Trust Into Broadcom's VCF Across 54 Markets
Standard Chartered has standardised on VMware Cloud Foundation across 54 markets, embedding Zero Trust into the infrastructure layer itself. Here's what that actually means.
CISA Flags SharePoint Zero-Day CVE-2026-58644 With 48-Hour Patch Window
CISA gave federal agencies 48 hours to patch a CVSS 9.8 SharePoint RCE actively exploited as a zero-day. The deserialization bug is depressingly familiar territory.
SonicWall SMA Zero-Days Turn VPN Appliances Into Backdoors
Two chained SonicWall SMA 1000 zero-days are being exploited to turn remote-access appliances into unmonitored backdoors into Active Directory. Patching is not enough.
Aflac Japan Breach Report Blocked by Bot Wall: What We Know
A CPO Magazine report on an alleged Aflac Japan breach sits behind a bot-verification wall. What platform leaders should do when source signal fails.
Two 10.0 CVSS Joomla Zero-Days Hit KEV, FCEB Deadline Is Today
Two Joomla extension flaws scoring a perfect 10.0 on CVSS are being exploited in the wild, with FCEB agencies given until today, July 13, to patch.
DHS Database Breach and Adobe's New Patch Cadence Reshape Security Week
A $15 million Ryuk affiliate plea, 7 million records lifted from AssuranceAmerica, and Adobe doubling its patch cadence. The week AI shifted the defender's clock.
AI Gateways Become the New Cloud Attack Surface
A compromised LiteLLM proxy on AWS handed attackers cryptomining revenue and possibly Bedrock access. The unit economics of AI gateway security just changed.