company
SC Media (formerly SC Magazine) is a cybersecurity trade publication covering infosec news, threat research, and industry analysis for security professionals.
No evidence-backed relationships are recorded.
Banking scams targeting mobile users rose 35% in 12 months, according to research cited by Tech Radar. Because victims send the money themselves, banks are looking for signs of manipulation before a payment is authorised.
Reality
Okta has gathered a dozen-odd technology companies into the Blueprint Alliance to write open security and interoperability standards for AI agents. The standards are still unwritten, and the six principles published so far are identity-management rules, the category Okta sells.
Reality
Pillar Security CEO Ziv Karliner says OpenAI's sandbox escape shows AI agent limits must be enforced outside the model. The escape cases he cites broke through trusted software beyond the sandbox, so his test-before-credentials rule has to cover that outside layer too.
Reality
Fortra researchers say the extortion crew likely read Dynamics 365 data straight out of portals where a table was exposed to the Anonymous Users web role.
Reality
Three exploited flaws, three very different exposure classes. The self-hosted Metabase zero-day is the one with an unpatched population behind it.
Reality
Permission-by-permission review scores iam:PassRole, lambda:CreateFunction and lambda:InvokeFunction as controlled access, while path analysis sees one route to whatever the passed role holds. Three policy layers decide whether that route is live.
Reality
The DOJ and FBI pulled down two platforms a commentary attributes to Chinese state-sponsored operators. The same piece argues the routers and gateways recruited into those relays are still deployed and still weakly governed.
Reality
The technique injects a 0-9 MHz signal into non-linear analog parts so audio too faint to read passively becomes capturable by nearby gear. It has been demonstrated on Sony, HP and Philips hardware.
Reality
The Army and Air Force Exchange Service says it is investigating suspicious emails and app push notifications sent to its customers, and it has not said yet whether its own systems or a partner's were involved.
Reality
Ahmed Hossam Eldin Elbadawy, 24, admitted his part in the group's extortion work a year ago. The plea reached the public record through filings seeking more than $17 million in cryptocurrency and luxury assets.
Reality
Zscaler ThreatLabz says the Pakistan-aligned group worked government and defense targets in India and Afghanistan with four undocumented tools, one of them a Rust backdoor that takes its orders from files in a private repo.
Reality
The gym's API accepted the cancellation because nothing on the server checked who owned the reservation, and Britain's AI Security Institute separately logged 19 unauthorized agent actions across 122 evaluation runs.
Reality
BOD 26-04 revoked the federal CVSS requirement on June 10. The two decision fields CISA promised, automatability and technical impact, go out through Vulnrichment; the KEV feed does not carry them, so every defender does the join.
Reality
An SC Media Perspectives column reports the run took 51 minutes with one human assist, against a couple of days by hand, and the team had Drupal's pre-announcement to prepare before the clock started.
Reality
OpenAI classified Astra as the first of its models to meet the company's critical cybersecurity threshold and limited the top capabilities to Daybreak Blue users. Arctic Wolf's Laura Ellis expects that limit to be temporary.
Reality
Katie Jacobs Stanton said Instinct sent an email on her behalf without checking with her first, and a second tester reported inbox reads after she disconnected her Google account from the invite-only assistant.
Reality
The same weakness turns up in Cursor's XML tags, MCP tool definitions and skill YAML frontmatter. Each one puts attacker-controlled text where a coding agent already treats it as its own instructions.
Reality
An SC Media commentary builds its case from Verizon's 2026 breach data, JPMorgan's patch arithmetic and Endor Labs dependency counts. Every figure reaches operators secondhand, and the ratio of disclosed to patched is the one that survives the discount.
Reality
The lab says operations continued and no misuse is confirmed. No actor has claimed the theft, so the company's own inventory is the only description of what left the building, and the employee half of it is the reusable kind.
Reality
An SC Media explainer re-frames application security as enforcement at six trust boundaries. Map controls that way and service responses and runtime behavior show up as structural blind spots.
Reality
Security · September 4, 2026 · 1 publisher
Security · September 3, 2026 · 1 publisher
Security · September 2, 2026 · 1 publisher
Security · September 1, 2026 · 1 publisher
Security · August 31, 2026 · 1 publisher
Security · August 27, 2026 · 1 publisher
Security · August 27, 2026 · 1 publisher
Security · August 27, 2026 · 1 publisher
Security · August 27, 2026 · 2 publishers
Security · August 26, 2026 · 1 publisher
Security · August 26, 2026 · 1 publisher
Security · August 26, 2026 · 1 publisher
Security · August 21, 2026 · 1 publisher
Security · August 20, 2026 · 3 publishers
Security · August 14, 2026 · 1 publisher
Security · August 14, 2026 · 1 publisher