Shawn Maschino
Weekly Cybersecurity Report: September 28–October 4, 2026 — FortiMail, SD-WAN, and Exposed GitHub Secrets
Active exploitation of enterprise control planes, unsafe AI-agent behavior, persistent credential exposure, and critical-infrastructure attacks demand faster investigation, containment, and recovery decisions.
Weekly Cybersecurity Report: September 21–27, 2026 — NetScaler, EvilTokens, and NIST’s OT Draft
Exploited edge platforms, adaptive enterprise attacks, cloud-identity abuse, AI-agent boundary failures, and updated OT guidance drive this week’s leadership priorities.
Weekly Cybersecurity Report: Exploited Trust Controls, Supply-Chain Exposure, and AI Agent Boundaries
Exploited security controls, trusted-script compromise, maritime cyber incidents, developer targeting, and AI-agent weaknesses put enterprise trust boundaries under scrutiny.
Stop Treating Phishing Click Rate as a Resilience Metric
New research reinforces an old warning: phishing click rate cannot prove resilience. Leaders need evidence of credential protection, reporting, and containment.
Weekly Cybersecurity Report: Control-Plane Exploits, Agentic Attacks, and EU Reporting
Exploited control planes, faster AI-enabled attacks, evolving identity fraud, and new EU product-security reporting obligations shaped this week’s leadership decisions.
The FBI Cyber Strategy Changes the Incident Contract
The FBI’s new cyber strategy promises faster victim support, deeper partnerships, expanded OT expertise, and AI-enabled operations. Enterprises must build the operating capability to engage before a crisis.
Weekly Cybersecurity Report: Trusted Infrastructure, AI Credentials, and Quantum Readiness
Trusted enterprise platforms faced rapid exploitation, AI services exposed concentrated credentials, and new guidance sharpened decisions on post-quantum migration and outage communications.
UK Vendor Directions Turn Procurement Into Architecture
Proposed UK powers could force critical-infrastructure operators to restrict or remove vendor technology. The practical response is dependency knowledge, safe exit architecture, and evidence that essential services can survive the change.
The Boston Scientific Outage Shows What Business Recovery Really Requires
Boston Scientific’s cyber disruption shows why recovery must restore the complete business service: manufacturing, order flow, partner trust, fulfillment, and customer status.
Weekly Cybersecurity Report: AI Containment, OT Exposure, and Active Exploitation
AI-agent containment failure, widespread OT targeting, new power-sector supply-chain controls, exploited enterprise platforms, and operational disruption shape this week’s leadership decisions.