Enterprise Security Tech

A cybersecurity resource for CxOs

GitLab Patches Maximum-Severity RCE in Self-Managed Servers

GitLab fixed CVE-2026-97229, a CVSS 10 flaw that could let an unauthenticated attacker execute code through a crafted CI/CD configuration.

Oct 13

Public Database Exposed 13.7 Million Credentials and Financial Records

Researcher Jeremiah Fowler found a publicly accessible database containing credentials, personal information and apparent bank details tied to users worldwide.

Oct 13

Alert Noise Is Straining Threat Intelligence Teams as AI Risks Rise

Flashpoint found that alert noise, limited analyst capacity and disconnected tools are shaping threat-intelligence investment for 2027.

Oct 13

82% of U.S. Campaign Domains Failed to Enforce DMARC

A review of 3,756 campaign domains found most were not configured to block spoofed email, creating an impersonation risk before the midterms.

Oct 13

One Phishing Email Targeted Both Employees and Their AI Assistants

Barracuda found a campaign pairing a conventional attachment with hidden prompts intended to manipulate AI email summaries.

Oct 13

Oracle Health Breach Reportedly Exposed Data on Nearly 20 Million People

New state data reveals the scale of a 2025 attack on legacy Cerner systems that contained personal and medical information.

Oct 13

1 24 5