Company
US penetration testing and security consultancy known for its training work and open-source offensive tooling.
Glow researchers found AI coding agents posted more than 13,000 internal screenshots to public GitHub repositories across more than 300 organizations. Each agent was answering a developer's request, and Glow says 93% of the cases it reviewed sat in personal accounts.
Reality
CVE-2026-59310 gave a suspected APT crew persistence on vCenter systems in August. CISA has now flagged the same directory traversal as abused by ransomware operators. Broadcom patched it on July 29.
Reality
The Sept. 22 study of 2.5 million devices in 209 organizations found cameras alone in 51 of 2,266 camera segments, and Black Hills Information Security's John Strand says the true isolation rate is lower.
Perspective Coverage
3 publishersReality
A year on from the CISA and NSA memory-safety report, the adoption evidence is still provider roadmaps and practitioner judgement about C and C++ code that nobody proposes to rewrite wholesale.
Reality
The bug lets files be pushed and executed through a remote session the host already approved, and CISA says attackers are doing it now. It is ScreenConnect's fourth entry on the KEV catalog since 2024.
Reality