Explain This: The SonicWall SMA1000 Bug Is an Edge-Control Problem
SonicWall's SMA1000 zero-days are not just another patch alert. They show why remote-access appliances need ownership, evidence, and a short response clock.
vulnerability-management
Breach Autopsy: CISA KEV Adds CVE-2026-35616 in Fortinet FortiClient EMS
Breach Autopsy: CISA KEV Adds CVE-2026-35616 in Fortinet FortiClient EMS
On April 6, 2026, CISA added CVE-2026-35616 to the Known Exploited Vulnerabilities (KEV) catalog, with a federal remediation due date of April 9, 2026. The flaw affects Fortinet FortiClient EMS and can allow unauthenticated code or command execution through crafted
Breach Autopsy: Microsoft Ties Storm-1175 to High-Tempo Medusa Ransomware Operations
Breach Autopsy: Microsoft Ties Storm-1175 to High-Tempo Medusa Ransomware Operations
Microsoft reported on April 6, 2026 that threat actor Storm-1175 is running rapid intrusion-to-encryption operations and chaining vulnerable internet-facing systems into Medusa ransomware campaigns. The activity pattern matters for defenders because it compresses the detection window: initial access, privilege movement,
AI Vulnerability Scanners: Signal, Hype, and the Questions CISOs Should Ask
A single headline about an \\\"AI vulnerability scanner\\\" helped rattle cybersecurity stocks this week.