NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
November Patch Tuesday Brings Actively Exploited Outlook Zero-Day and Wave of Critical Bugs
Microsoft's November security update includes an Outlook zero-day under active exploitation, alongside a large batch of critical flaws in Exchange, SharePoint, Windows…
How to Set Up an SSH Certificate Authority for Your Home Lab in an Afternoon
Replace scattered authorized_keys files with one OpenSSH certificate authority that issues short-lived user and host certificates. This guide walks through a working…
Vanderbilt University responds to BYOD ransomware attack amid data theft claims
Vanderbilt University is investigating an active cybersecurity incident claimed by the BYOD ransomware gang, which says it encrypted university databases and stole…
Fireworks AI discloses second breach tied to compromised third-party cloud provider
AI inference startup Fireworks says attackers reached its development machines through a breached cloud provider, exposing some customer billing details and model…
York University breach exposed personal data from website forms dating to 2007
York University in Toronto confirmed an attacker accessed personal information submitted through online departmental forms, including government ID and health data, with…
Build a Segmented Home Lab Behind WireGuard: VLANs, Firewall Rules, and Remote Access
Set up a WireGuard VPN, split IoT and server traffic onto separate VLANs, and write default-deny nftables rules. You finish with remote…
Microsoft Paint RCE Fix Ships Through Microsoft Store, Not Windows Update
A remote code execution flaw in Windows Paint, tracked as CVE-2026-83844, has been patched, but the fix reaches users only via a…
D-Link warns of unpatched zero-days in DGS-3130 Series switches
D-Link has published interim mitigations for several unpatched flaws in its DGS-3130 managed switches, which could expose device data, enable configuration changes,…
Veeam Software Appliance VMs fail to boot on certain AMD EPYC hosts
Veeam has warned that its Linux-based Software Appliance virtual machines can crash with a kernel panic on some AMD EPYC processors due…
QNAP warns NAS devices are being breached through Plex2Shell attacks
QNAP says attackers are compromising NAS devices by exploiting a four-flaw chain in Plex Media Server, and users running exposed vulnerable servers…
DigiCert Discloses Data Breach Exposing Business Customer Records
Certificate authority DigiCert says an internal business system moved outside its VPN was accessed by an outsider, exposing customer identity documents. Its…
SonicWall Warns of SSL-VPN SAML Auth Bypass Flaw Exploited in Attacks
SonicWall has patched seven SonicOS vulnerabilities, including CVE-2026-19868, an SSL-VPN authentication bypass that CISA confirms is being exploited in the wild. Affected…