Blog – Page 44 – VigilantAI

September 18, 2026
No Comments

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

September 18, 2026
No Comments

Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords

September 18, 2026
No Comments

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

September 18, 2026
No Comments

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

September 17, 2026
No Comments

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

September 17, 2026
No Comments

U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attacks

September 17, 2026
No Comments

BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

September 17, 2026
No Comments

Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records

September 17, 2026
No Comments

China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America

September 17, 2026
No Comments

OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads

PHP2Shell: What the rapid exploitation of critical PHP vulnerabilities means for security teams November 6, 2026
Attackers were already trying to exploit PHP2Shell before details of the vulnerabilities emerged publicly on October 20, 2026. The two critical vulnerabilities affect PHP, which many websites and business applications rely on, and allow threat actors to execute code on vulnerable servers without needing login credentials. The early exploitation attempts put organizations on the back […]
Kirsten Doyle
PHP2Shell: Finding the PHP You Didn’t Know You Were Running October 30, 2026
October 29 was the deadline CISA gave US federal agencies to patch PHP2Shell. Most businesses sit outside that mandate, yet the date is a fair yardstick for everyone else. Exploitation is confirmed, fixes have been out for eight days, and for many teams the hardest question is still the first one: where exactly are we […]
Anastasios Arampatzis
AI penetration testing tools compared: what autonomous pentesting actually validates October 30, 2026
Validation in AI pentesting is the process that ensures a simulated exploit or vulnerability is legitimate, reproducible, and poses a security risk to the targeted system. It’s the foundation of effective risk prioritization. As penetration testers rely more heavily on AI tools to produce results at scale, exploit validation has become increasingly important in separating […]
Josh Breaker Rolfe
Winners Named at Security Serious Unsung Heroes Awards 2026 October 26, 2026
The Security Serious Unsung Heroes Awards celebrate the individuals and teams who make the UK a safer, more inclusive place to do business. London, UK – 22nd October 2026 – Eskenzi PR has today announced the winners of the tenth annual Security Serious Unsung Heroes Awards. The event took place on Tuesday night at St Barts Pub in […]
ISB Editorial Staff
Best Cybersecurity Marketing Agencies for B2B October 19, 2026
The best cybersecurity marketing agencies for B2B vendors combine security expertise with the ability to turn complex products into credible messaging, relevant demand and measurable commercial opportunities. What makes a cybersecurity marketing agency different from a generalist? A cybersecurity marketing agency should understand how security products work, how buyers evaluate them and which claims need […]
Guest Author
8 Chainguard alternatives and complements with language library coverage October 16, 2026
Hardened container images solved one part of the software supply chain problem. The operating system layer can now ship with few or no vulnerabilities known at the time it was built, and it can be rebuilt and repatched continuously. But most of the code running in a modern application does not come from the base […]
Or Hillel
Sovereignty vs Convenience September 23, 2026
Technology decisions have traditionally been driven by functionality, price, and ease of use. If a solution met the business need and integrated with existing systems, it was usually considered the right choice. Who owns the service provider and which legal jurisdiction governs rights to the service rarely features in procurement discussions. That is beginning to […]
Nick Case
Gemini crosses the line in cybersecurity test September 22, 2026
Google has confirmed that its Gemini AI accessed systems belonging to three companies during a cybersecurity evaluation after mistaking them for targets included in the test. The incidents happened in May while independent AI evaluator Irregular was testing Gemini’s cybersecurity capabilities. The Wall Street Journal reported that Gemini had unintended internet access during the exercise […]
Kirsten Doyle
Texas utility CenterPoint confirms breach after attacker leaks customer data September 22, 2026
Texas utility CenterPoint Energy has confirmed a data breach after a threat actor published customer information online and claimed to have stolen around 7.5 million records. CenterPoint said an unsanctioned third party accessed personal information through one of its external-facing systems. The company has brought in cybersecurity experts to investigate the breach. An attacker using […]
Kirsten Doyle
Rogue AI agents put trusted access under scrutiny September 22, 2026
Two newly disclosed incidents involving rogue AI agents are raising questions about what happens when autonomous software operates through apparently legitimate access. In both cases, agents were able to use valid accounts or credentials and continue searching for ways into systems and data beyond the access they had been given. OpenAI this week disclosed more […]
Kirsten Doyle

Category: Blog

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attacks

BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records

China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America

OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads

[email protected]