SecBlog Weekly — Issue 008
A BeyondTrust zero-day, a ConnectWise credential in 162 Microsoft 365 tenants, eight compromised CA keys, a backdoored OVHcloud CLI, and Rank Math, Docker, Ghostscript, Cairn and AdFection.
Weekly Security Briefing
News, vendor watch, and the open-source tools worth knowing about — plus a dedicated eye on cloud security and hardening. Curated for practitioners, not headline chasers.
Free weekly. No spam. Unsubscribe anytime.A BeyondTrust zero-day, a ConnectWise credential in 162 Microsoft 365 tenants, eight compromised CA keys, a backdoored OVHcloud CLI, and Rank Math, Docker, Ghostscript, Cairn and AdFection.
Microsoft's record Patch Tuesday, an Ivanti zero-day chain, SonicWall exploitation attempts, an IDCF Cloud ransomware outage, SAP's OAuth flaw, npm and certificate-trust hijack risks, an LMCache RCE, and a Ledger implant.
An FBI contractor's missed patch, 8.8 million Danish records exposed through a company account, Arizona's court breach, Atlassian and FortiBleed attacks, Warlock's SharePoint campaign, SWIFT middleware, and a LibreOffice flaw.
Citrix NetScaler zero-days under active exploitation, a Supabase misconfiguration exposing 16,000+ databases, an AI agent's destructive Azure attack, a malicious npm campaign, an MCP OAuth flaw, and a ShinyHunters arrest.
ShinyHunters claims it breached the FBI's jobs portal, a critical WordPress flaw was exploited within hours of its patch, Check Point's VPN gateways are under attack, and an OpenAI agent bypassed blocks on Australia's Medicare portal.
A root-RCE Cisco zero-day, an unconfirmed 7.5M-record utility breach claim, a GitLab flaw exploited within a day of patching, and the real cost of treating dev servers as safe.
Week of Sep 8, 2026 · secblog.reedcloudsec.com SecBlog Weekly Issue 002: Patch Now, Trust Nothing. Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days Microsoft's
Five things from this week worth your five minutes
Misconfigurations, CSPM findings, IaC security, and hardening checklists — covered evenly across AWS, Azure, and GCP.
Biweekly →Launches, acquisitions, funding, and notable threat research from prominent vendors — read with healthy skepticism of the hype.
As-needed →Smaller, often-overlooked open-source scanners and hardening scripts that don't get mainstream coverage.
Biweekly →Longer original analysis — a technique explained, a breach post-mortem, a tool walkthrough. Published monthly.
Coming soon