The US CISA has issued binding directive to agencies on how fast patching must be done based on the severity level of the CVE or devices need to be taken offline. www.cisa.gov/news-events/...

The Australian cybersecurity agency has organized and published all their advice, guidance and publications here. www.cyber.gov.au/about-us/vie...

The UK government has given Apple and Google til september to install software on phones that will prevent minors from sending or receiving explicit images on their phones. www.theguardian.com/technology/2...

Thanks to Arista for joining HPE Networking Melillo Consulting and Solutional for sponsoring the (US)NUA is coming to Pittsburgh! (PA)NUG PGH is a great vendor neutral forum for network engineering professionals. Register to reserve your spot. Hope to see you there. www.usnua.com/live/panug-p...

Looks like MacOS 27 from Apple will no longer support Intel processors. appleinsider.com/articles/26/...

That time again to review the eleven new CVE published by Palo Alto Networks and get patching the affected gear. security.paloaltonetworks.com

The (US)NUA is coming to Pittsburgh! (PA)NUG PGH is a great vendor neutral forum for network engineering professionals to meet and chat. The free Inaugural event will be July 23, 2026 at the Southside Hofbräuhaus. Register to reserve your spot. Hope to see you there. www.usnua.com/live/panug-p...

Project Lightwell by IBM is devoted to fixing vulnerabilities in open source software and devoting serious resources to the effort. www.ibm.com/products/lig...

The use of SMS for 2 factor authentication is being eliminated by Microsoft in favor of more robust options. support.microsoft.com/en-us/accoun...

Interesting report from the Anthropic red team on the accounts suspended for malicious activity. Most were using it to write malware or obfuscate code but few were pulling complex operations. red.anthropic.com/2026/attack-...

The EU has announced a plan to boost tech sovereignty and reduce reliance on US companies increasing chip production locally and cutting red tape for local companies. ec.europa.eu/commission/p...

Interesting overview from Palo Alto Networks on the FlutterShell backdoor malware targeting Apple devices. unit42.paloaltonetworks.com/flutterbridg...

Report from Interisle finds that at least 10% of domains registered last year are malicious. And three registrars had over 80% of their domains deemed malicious and blocked. interisle.net/insights/cyb...

Good news that Dutch police have arrested two suspects that were creating and selling phishing templates for scammers. www.politie.nl/nieuws/2026/...

Hackers have breached and leaked to journalists documents from the Russian disinformation operations showing how they are working against various countries. fip.am/en/48768

Initial report from Anthropic on the 23k vulnerabilities found by the Mythos cybersecurity model. About a quarter of these are rated high or critical. Just a hint as to where #AI is taking offensive security. www.anthropic.com/research/gla...

According to scans from Censys over 12k MCP servers are exposed to the internet and offering access to internal information stores. censys.com/blog/mcp-ser...

Good news that the Dutch NCSC took down the control system for a 17 million member botnet operation using primarily small personal devices. www.ncsc.nl/nieuws/gezam...

Good news that Crowdstrike, Google and Shadowserver Foundation have worked together to take down Glassworm botnet infrastructure that infected open source projects to spread. www.crowdstrike.com/en-us/blog/i...

Germany has published a new framework to help companies create sovereign cloud with providers in the EU as alternatives to the US based giants. incyber.org/en/article/g...

The (US)NUA is coming to Pittsburgh! (PA)NUG PGH is a great vendor neutral forum for network engineering professionals to meet and chat. The free Inaugural event will be July 23, 2026 at the Southside Hofbräuhaus. Register to reserve your spot. Hope to see you there. www.usnua.com/live/panug-p...

New Hardened images are available from the Red Hat catalog that have both minimized container images and faster patching for CVE fixes. www.redhat.com/en/blog/red-...

The UK has plans to update legal protections for cyber security researchers so they will not face criminal or other legal problems while doing good faith cyber security research. therecord.media/uk-moves-to-...

Eight of the largest US Telcos have created a new Cybersecurity sharing partnership in C2ISAC to help secure and prevent state level intrusions. about.att.com/story/2026/c...

Interesting overview from CloudFlare on exactly how they used the Anthropic Mythos #AI model to find and exploit software vulnerabilities in their systems. blog.cloudflare.com/cyber-fronti...

Interesting deep dive on the Apple MacOS CVE-2026-28910 patched last month that allowed full file system access. mysk.blog/2026/05/19/c...

Looks like SBOM is coming for #AI models as the G7 have prepared the first minimum draft requirements. www.bsi.bund.de/SharedDocs/D...

The UK is fining 1M£ the Staffordshire water authority for failing to detect a systems compromised and a data breach for two years. ico.org.uk/about-the-ic...

Good news that the crack down on scam centers worldwide continues with Indonesian authorities detaining 200 while closing down another scam center. www.channelnewsasia.com/asia/indones...

Good outline of Google security features coming to Android this year with a focus on intrusion logging to provide forensic data for detection and response. blog.google/security/wha...

A proposed new security feature in Linux will allow admins to disable specific kernel functions that have been compromised until a patch arrives. An apparent response to recent copy fail and Dirty Frag bugs. lore.kernel.org/all/20260507...

Interesting deep drive from Google on how adversaries are using free #AI accounts and bypassing safeguards for their malicious efforts. cloud.google.com/blog/topics/...

Interesting deep dive on the flaw found in three MCP server implementations by Akamai. www.akamai.com/blog/securit...

Another reminder that we need to make sure our encryption algorithms are advanced to the right levels. Current NVIDIA cards can crack most MD5 in an hour. www.kaspersky.com/blog/passwor...

I enjoyed being a delegate for #XFD15 by the @techfieldday.com team. Dell Technologies presentation by Steve Kenniston covered security at Dell across all product lines with a strength of process and strong supply chain. www.linkedin.com/pulse/dell-a...

That time again to review the 24 new security advisories posted by Palo Alto Networks and get patching the affected gear. security.paloaltonetworks.com

Good news that two more people involved in hosting North Korean laptop farms in the US have been sentenced to prison time and large fines. www.justice.gov/opa/pr/two-u...

I enjoyed being a delegate for #XFD15 by the @techfieldday.com team. @futurumgroup.bsky.social Research presented their Cybersecurity and resilience data survey by @fsmontenegro.bsky.social and @networkingnerd.net Showing the major trends for the industry. www.linkedin.com/pulse/curren...

Good news that two more people involved in hosting North Korean laptop farms in the US have been sentenced to prison time and large fines. www.justice.gov/opa/pr/two-u...

I enjoyed being a delegate for #XFD15 by the @techfieldday.com team. This @fortinetinc.bsky.social presentation by Ramnath Shenai covers how the FortiSASE product uses browser security via POP connections for full regulatory compliance. www.linkedin.com/pulse/fortis...

Interesting report on the recent Android bug reported by the UK non-profit Barghest that allows remote shell on the device taking advantage of a troubleshooting tool that had to have been used previously. barghest.asia/blog/cve-202...

Good news the global take down on internet scam centers continues with Uganda arresting 169 people in their raid on a center targeting southeast asian communities. www.reutersconnect.com/item/uganda-...

Interesting deep dive from Kaspersky on the compromise found in the DAEMON Tools CD burner software. A Trojan was added from December to April with a legitimate signed certificate. securelist.com/tr/daemon-to...

I enjoyed being a delegate for #XFD15 by the @techfieldday.com team. This @fortinetinc.bsky.social presentation by Hari Krishnan covers the Endpoint Agent consolidation with a focus on Data Security Protection. www.linkedin.com/pulse/consol...

Interesting deep dive by Palo Alto Networks on the exploit just patched on their own platform. unit42.paloaltonetworks.com/captive-port...

I enjoyed being a delegate for #XFD15 by the @techfieldday.com team. This @fortinetinc.bsky.social presentation by Max Zeumer reviews in detail how the FortiSOC tools and managed services provide an integrated platform to ingest security data. www.linkedin.com/pulse/option...

That time again to review the out of cycle critical CVE report from Palo Alto Networks and get patching the affected devices. security.paloaltonetworks.com/CVE-2026-0300

I enjoyed being a delegate for #XFD15 by the @techfieldday.com team. This @fortinetinc.bsky.social presentation shows the implementation of Post Quantum Encryption and monitoring of #AI agents by Wei Ling Neo. www.linkedin.com/pulse/protec...

Good news that an insider threat at a Maryland hospital has been charged with installing spyware on over 200 coworkers systems to collect credentials and spy on them. www.thebanner.com/community/cr...

I enjoyed being a delegate for #XFD15 by the @techfieldday.com team. The overview presentation from @fortinetinc.bsky.social by Chris Hinsz shows how both feature and operations deployment are part of the solution to security deployment and management. www.linkedin.com/pulse/divers...