
October 7, 2026
Apple to Tighten macOS Full Disk Access Controls Over AI Agent Risks
Apple is tightening macOS Full Disk Access after reports that AI agents accessed private user data. New controls will require explicit user action before

October 7, 2026
The Credential Layer Is Outgrowing Enterprise Security Visibility
Software production is accelerating faster than security controls can map it, and the credential layer that connects everything is expanding with it.

October 7, 2026
Former engineer sentenced to 32 months for locking 3,284 workstations in ransomware-style attack on employer
A former core infrastructure engineer was sentenced to 32 months in prison for using admin access to lock thousands of devices and demand a 20 bitcoin ransom

October 6, 2026
Security Roundup, October 6: NetScaler Denial of Service and Dell System Update Flaw
Daily security roundup: NetScaler denial-of-service flaw under active attack, Dell System Update root exploit, and ransomware hits at healthcare and education.

October 6, 2026
Apple patches actively exploited zero-day in Core Graphics (CVE-2026-86950)
Apple ships iOS 26.7.1, iPadOS 26.7.1, and macOS fixes for an out-of-bounds write flaw in Core Graphics that was exploited in targeted attacks.

October 6, 2026
Citrix NetScaler zero-day exploited to deploy web shells and tunneling malware
Attackers exploited a Citrix NetScaler memory overflow flaw to install web shells, steal credentials, and pivot into internal networks.

October 6, 2026
Apple Zero-Day CVE-2026-86950 Exploited in Targeted Attacks
Apple patches a CoreGraphics zero-day weaponized against specific individuals. Learn which iPhones and iPads are affected and how to respond.

October 6, 2026
NetScaler ADC Flaw (CVE-2026-88772) Exploited for Root Access, WHIPSHOT and SLAPSHOT Deployed
Attackers exploit a Citrix NetScaler memory overflow flaw to gain root access and deploy WHIPSHOT web shells and SLAPSHOT tunnels across dozens of

October 6, 2026
CISA Adds Apple Out-of-Bounds Write Vulnerability to KEV Catalog
CISA added one Apple vulnerability, CVE-2026-86950, to the Known Exploited Vulnerabilities Catalog on September 29, 2026.
