
October 3, 2026
Security Startup Finds 13,000+ Internal Screenshots Leaked to Public GitHub Repos by AI Agents
Glow Security found more than 13,000 internal screenshots from 343 organizations on public GitHub repos, uploaded by AI coding agents using a workaround for

October 2, 2026
AI Agents Keep Access to Company Data After Their Work Is Done
A Delinea 2026 report finds that most organizations lack real-time enforcement of AI agent access, with credentials often remaining active after tasks end.

October 2, 2026
Security Roundup, October 2: FortiMail Zero-Day and Kiteworks Code Injection Flaw
Two max-severity email and file-sharing flaws demand urgent action this week, alongside AI-agent probes against government sites and a new PwC threat survey.

October 2, 2026
Security Roundup, October 1: Cisco SD-WAN Zero-Day and Bitget Theft
Cisco patches a critical SD-WAN flaw already under attack, Bitget confirms a $387.5M theft, and Google reports AI finds the flaws attackers want.

October 2, 2026
Security Roundup, September 30: Citrix NetScaler Exploit and Unsloth Studio Flaw
September 30 security roundup: Citrix NetScaler pre-auth exploit, Unsloth Studio code execution flaw, Spectre v2 BTR leaks, and more.

September 30, 2026
CISA orders federal agencies to patch exploited Citrix NetScaler flaws by September 30
CISA has added two actively exploited Citrix NetScaler flaws to its KEV catalog and ordered U.S. federal agencies to secure appliances by September 30.

September 30, 2026
Weekly Recap: $387M Crypto Hack, Citrix NetScaler Exploits, and AI Agents Bypassing Websites
A $387M Bitget crypto heist, actively exploited Citrix NetScaler flaws, an AI agent bypassing a health site, and a placeholder domain weaponized across 1,700

September 30, 2026
Citrix NetScaler Zero-Days Exploited: What the U.S., U.K. and Dutch Warnings Cover
Two Citrix NetScaler zero-days (CVE-2026-88771 and CVE-2026-88772) are under active exploitation. CISA has set a federal patch deadline of Wednesday.

September 30, 2026
A four-week plan to tackle vendor concentration risk
A four-step mapping exercise reveals how 30 vendors can hide five choke points, with a four-week plan teams can start on Monday.
