en
Security Roundup: SharePoint's Next Zero-Day, Oracle's Record CPU, and the EY Breach (Week of July 20, 2026)
Weekly briefing: SharePoint deserialization RCE, Oracle PeopleSoft zero-day chain (100+ breaches), EY breach, and Capital One VulnHunter.
Latest
en
VulnHunter: How Capital One Is Using Agentic AI to Hunt Vulnerabilities Before Attackers Do
Case study on Capital One's VulnHunter: autonomous agentic AI scanning codebases and identifying zero-day logic flaws.
en
EY Breach: What Was Taken, Who's Affected, and What Clients Should Do
Analysis of the Ernst & Young (EY) breach exposing confidential audit workpapers, M&A filings, and client dossiers.
en
CVE-2026-35273 & CVE-2026-35278: The Oracle PeopleSoft Zero-Day Chain Behind 100+ Breaches
How threat actors chained two unauthenticated Oracle PeopleSoft zero-days to breach over 100 enterprise environments.
en
CVE-2026-50522: Microsoft SharePoint's Next Deserialization RCE, Exploited Days After a Public PoC
Technical root cause of the SharePoint deserialization RCE exploited within days of public proof-of-concept release.
en
Klue Supply Chain Breach: What Happened, Who's Affected, and What to Audit
Comprehensive post-mortem of the Klue OAuth compromise and a step-by-step Salesforce integration audit guide.
en
GhostApproval: How Wiz Research Found AI Coding Assistants Writing Files Before You Approve Them
Wiz Research uncovers GhostApproval: AI coding assistants pre-emptively executing file modifications before user approval prompts.
en
Accenture Breach: What Was Taken, Third-Party Exposure, and What to Do If You're a Vendor or Client
Detailed investigation into unauthorized third-party access to Accenture systems and recommended client security audits.
en
CVE-2026-56164 & CVE-2026-56155: Microsoft's SharePoint and AD FS Zero-Days in the July 622-CVE Patch Tuesday
Deep dive into Microsoft's record 622-CVE Patch Tuesday featuring active SharePoint and Active Directory Federation Services zero-days.
en
CVE-2026-15409 & CVE-2026-15410: Inside the SonicWall SMA 1000 Zero-Day Chain
Technical root cause and exploit chain analysis for the maximum-severity SonicWall SMA 1000 zero-day pair.
en
Security Roundup: SonicWall Zero-Days, Microsoft's Record Patch Tuesday, and the Klue Breach Fallout (Week of July 13, 2026)
Weekly briefing: SonicWall SMA 1000 zero-day chain, Microsoft 622-CVE Patch Tuesday, Accenture breach, and GhostApproval AI trust flaws.
en
Security Roundup: Adobe ColdFusion CVSS 10 Wave, SharePoint Warlock Ransomware, LoadMaster Pre-Auth RCE, Argo CD Kubernetes Zero-Auth — Week of July 3, 2026
Weekly briefing: Adobe ColdFusion 6x CVSS 10.0 wave, SharePoint Warlock ransomware, and Cursor IDE DuneSlide prompt injection.