Fractional CTO

Today’s signal The Hacker News recently reported iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days. Published context: July 13, 2026. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security flaws impacting iCagenda and Balbooa extensions for Joomla to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation in the wild. The vulnerabilities, both rated 10.0 on the CVSS scoring system, are below - CVE-2026- ...

Today’s signal TechCrunch recently reported US cybersecurity agency CISA had to build its incident playbook during the incident, agency reveals. Published context: July 11, 2026. Independent cybersecurity journalist Brian Krebs reported in May that a security researcher with cyber firm GitGuardian alerted him to reams of exposed passwords stored in a publicly accessible GitHub repository, which an employee of a CISA contractor had uploaded. The reason this matters is simple: buyers are paying attention to speed, operational resilience, and credible technical execution. A trending story can create awareness, but the business question is what a team should do with that attention. ...

Today’s signal The Hacker News recently reported Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions. Published context: July 11, 2026. Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code execution. The vulnerability has been described as a case of stored cross-site scripting (XSS) that could allow specially crafted emails to execute malicious scripts in a user’s session. It has yet to b ...

Today’s signal The Hacker News recently reported Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS. Published context: July 8, 2026. Ubiquiti has shipped updates to address multiple critical security flaws impacting UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS that could result in privilege escalation and arbitrary command execution. The list of vulnerabilities is as follows - CVE-2026-50746 (CVSS score: 10.0) - An improper access control vulnerability in UniFi Con ...

Today’s signal The Hacker News recently reported Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges. Published context: July 9, 2026. Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month after details of the flaw became public. The vulnerability, tracked as CVE-2026-50656 (CVSS score: 7.8), is a privilege escalation issue in the Microsoft Malware Protection Engine (“mpengine.dll”), which provides scanning, detection, and cleaning capabil ...

Today’s signal TechCrunch recently reported Hacked, leaked, and held for ransom: The worst breaches of 2026 so far. Published context: July 7, 2026. From a massive DOGE data breach and the hacking of critical energy and water systems to the hack of an FBI surveillance system, here are the most damaging security incidents and data breaches of 2026. The reason this matters is simple: buyers are paying attention to speed, operational resilience, and credible technical execution. A trending story can create awareness, but the business question is what a team should do with that attention. ...

Today’s signal The Hacker News recently reported BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA. Published context: July 7, 2026. BeyondTrust has released updates to address two critical security flaws affecting Remote Support (RS) and Privileged Remote Access (PRA) products that, if successfully exploited, could allow unauthenticated attackers to take control of susceptible devices. The vulnerabilities are listed below - CVE-2026-40138 (CVSS score: 9.2) - A pre-authentication vulnerab ...

Today’s signal The Hacker News recently reported U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case. Published context: July 4, 2026. A U.S. government entity paid about $1 million to keep stolen files from being leaked, according to a new case study by Rakesh Krishnan for Ransom-ISAC, built on a leaked negotiation chat and the blockchain trail the payment left. The odd part: the group that took the money calls itself Kairos, but it may not be a ransomware gang at all. Krishnan found no si ...

Today’s signal The Hacker News recently reported SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation. Published context: July 2, 2026. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-45659 (CVSS score: 8.8), is a case of remote code execution arising from the deseria ...

Today’s signal The Hacker News recently reported New Avalon Malware Framework Packs CrownX Ransomware Capabilities. Published context: July 3, 2026. Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed Avalon that’s distributed by means of a multi-stage phishing chain capable of bypassing traditional security controls. Avalon combines credential collection, lateral movement, remote access, recovery disruption, and ransomware execution, bringing together The reason this matters is simple: buyers are paying attention to speed, operational resilience, and credible technical execution. A trending story can create awareness, but the business question is what a team should do with that attention. ...

Today’s signal The Hacker News recently reported Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials. Published context: July 2, 2026. Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial access. “Although tactics differ between affiliates, common patterns emerged in tradecraft through use of legitimate Remote Management and Monitoring (RMM) tooling, credential access, and hands-on-keyb ...

Today’s signal AWS What’s New recently reported AWS Artifact now includes Assurance Assistant for compliance inquiries. Published context: July 1, 2026. AWS Artifact now includes Assurance Assistant, an AI-powered capability that generates citation-backed responses to security and compliance questions about AWS services. AWS Artifact is the service through which AWS provides compliance reports, certifications, and agreements to customers. Assurance Assistant helps third-party risk managers, compliance office The reason this matters is simple: buyers are paying attention to speed, operational resilience, and credible technical execution. A trending story can create awareness, but the business question is what a team should do with that attention. ...