Decipher

The Senate has approved a bill that aims to improve the cybersecurity of the healthcare sector by providing grants, training, and best practices to rural health clinics and other providers on cybersecurity breach prevention, resilience, and coordination with federal agencies.

RESTON, VA--The hoary Silicon Valley imperative to move fast and break things never really stood up to any serious scrutiny. And in the age of AI and all the absurdity that’s come with it, that phrase has now become some sort of post-irony slogan for people who missed the boat the first time around and are hoping there are still posh seats available on the next one.

Necessary cookies enable essential site features like secure log-ins and consent preference adjustments. They do not store personal data. None Functional cookies support features like content sharing on social media, collecting feedback, and enabling third-party tools. None Analytical cookies track visitor interactions, providing insights on metrics like visitor count, bounce rate, and traffic sources.

A Tuesday FBI security advisory warned of a known, ongoing global credential-compromise campaign called FortiBleed, which was first reported in June 2026 and involved internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. FortiBleed is a known credential harvesting and brute force campaign that targets FortiGate devices with no multifactor authentication (MFA) and weak passwords.

RESTON, VA–The world can be a scary and uncertain place, especially for people like Paul Nakasone, who until quite recently had one of the more privileged and potentially insomnia-inducing views of the threat landscape as director of NSA. Knowing what’s actually happening across the world’s networks and what the most powerful adversaries are up to on any given day is not a recipe for a calm, quiet life.

When most people hear the term hacker, they think of a technically adept loner who'd rather pull apart binaries and analyze malware than talk to another human being. But the reality is that a lot of what hackers actually do is just social engineering in one form or another.

NetScaler administrators are currently navigating another difficult weekend following emergency efforts to secure their infrastructure against critical zero-day threats a week ago, and now many organizations are reporting that their appliances have entered forced, recurring reboot cycles. The initial patches were released to address CVE-2026-88771 and CVE-2026-88772, which were under active exploitation and allowed for unauthenticated remote code execution.

Necessary cookies enable essential site features like secure log-ins and consent preference adjustments. They do not store personal data. None Functional cookies support features like content sharing on social media, collecting feedback, and enabling third-party tools. None Analytical cookies track visitor interactions, providing insights on metrics like visitor count, bounce rate, and traffic sources.

Cisco is urging companies to apply patches for a critical-severity vulnerability in its software used to configure and manage Cisco’s SD-WAN network. The flaw, an API authentication bypass, is being exploited. The flaw exists in the API session-based authentication management of Cisco Catalyst SD-WAN Manager and stems from improper handling of URI encoding in HTTP requests, allowing an attacker to bypass an authentication rule designed to restrict access to a specific API endpoint.

When indications of exploit activity against an unknown vulnerability in Citrix NetScaler ADC and Gateway appliances late last week, researchers at watchTowr were among the first to speak up publicly about what was going on. They had information from national CERT authorities about the exploits, and recommended that customers take their appliances offline until fixes were ready.