🕵️ RESEARCH & DEEP DIVES
Security journalist Zack Whittaker asks people not to ask others if they have kids
Zack Whittaker posted on Mastodon asking people not to ask others in public or group settings whether they have kids, citing his own pregnancy loss.- Who: Zack Whittaker, a cybersecurity journalist, posting publicly on Mastodon.
- What: A personal plea not to ask people in public or group settings whether they have kids, noting the question comes up often.
- Impact: He shared that answering 'no' hurts because the truthful answer for him is 'none that made it to term', referencing lost pregnancies.
- How: The message was posted as a public toot on mastodon.social; no security incident, vulnerability, or attack is involved.
Windows 11 KB5124008 update breaks domain trust for some users — https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5124008-update-breaks-domain-trust-for-some-users/
Iranian hackers use CHOSEN BRICK Windows malware to spy on targets — https://www.bleepingcomputer.com/news/security/iranian-hackers-use-chosen-brick-windows-malware-to-spy-on-targets/
Malware bypasses browser checks to force install Chrome, Edge extensions — https://www.bleepingcomputer.com/news/security/malware-bypasses-browser-checks-to-force-install-chrome-edge-extensions/
CISA promotes a fresh way to deter cyberattackers: Lie to them — https://cyberscoop.com/cisa-guidance-cyber-decoys-critical-infrastructure/
Scans Targeting Hospitality Applications, (Wed, Sep 16th) — https://isc.sans.edu/diary/rss/33344
Cisco ISE API Authentication Bypass VulnerabilityA vulnerability in the REST ... — https://cve.threatint.com/CVE/CVE-2026-76423?utm_campaign=info&utm_medium=rss&utm_source=website
Cisco Nexus Dashboard Software Security Hardening Release September 2026 - SQ... — https://cve.threatint.com/CVE/CVE-2026-20361?utm_campaign=info&utm_medium=rss&utm_source=website
Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectuti... — https://cve.threatint.com/CVE/CVE-2026-20324?utm_campaign=info&utm_medium=rss&utm_source=website
Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Im... — https://cve.threatint.com/CVE/CVE-2026-20325?utm_campaign=info&utm_medium=rss&utm_source=website
Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service ... — https://cve.threatint.com/CVE/CVE-2026-92808?utm_campaign=info&utm_medium=rss&utm_source=website
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs... — https://cve.threatint.com/CVE/CVE-2026-81870?utm_campaign=info&utm_medium=rss&utm_source=website
Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Mi... — https://cve.threatint.com/CVE/CVE-2026-20326?utm_campaign=info&utm_medium=rss&utm_source=website
AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MS... — https://cve.threatint.com/CVE/CVE-2026-62949?utm_campaign=info&utm_medium=rss&utm_source=website
itsourcecode Leave Management System index.php sql injectionA flaw has been f... — https://cve.threatint.com/CVE/CVE-2026-92526?utm_campaign=info&utm_medium=rss&utm_source=website
When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts — https://blog.cloudflare.com/client-side-security-finds-4-malicious-campaigns/
KEV: CVE-2026-87886 — Acronis Backup — Acronis Backup Incorrect Default Permissions Vulnerability — https://nvd.nist.gov/vuln/detail/CVE-2026-87886
29-Point Readiness Gap: What Most AI Security Strategies Are Missing — https://securityboulevard.com/2026/09/29-point-readiness-gap-what-most-ai-security-strategies-are-missing/
Recursive Security: What If the Defenders Get Smarter, Too? — https://securityboulevard.com/2026/09/recursive-security-what-if-the-defenders-get-smarter-too/
I want a better watch — https://securityboulevard.com/2026/09/i-want-a-better-watch/