Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CVE-2026-10818 is an arbitrary file upload vulnerability in WPForms Pro, the paid edition of a widely deployed WordPress form builder plugin. It was published on July 25, 2026, with Wordfence as the assigning CNA. The flaw sits in the ajax_chunk_upload_finalize function, which handles the final step of a chunked file upload. File type validation runs after the chunk metadata and the file contents have already been written to disk, and the assembled file is not deleted when that validation fails.

Over 300 million people rely on Microsoft Teams to get their work done every day. That’s a lot of messages, meetings and “you’re on mute” moments happening every day. Teams makes it easy to collaborate. Too easy, sometimes. Anyone can create a new channel, add users and start sharing files in minutes. That’s great for getting work done, but it’s also how things get out of control. If you manage Teams, you’ve probably seen this happen.

The gap between attacker speed and defender readiness is widening. Attackers can now move from initial access to full domain control in less than a minute using AI.1 Large language model-generated phishing campaigns are achieving click-through rates 4.5 times higher than traditional methods.2 Most enterprise SOCs weren't built for this tempo and fidelity.

Google Security Operations (SecOps) is Google Cloud’s security operations platform for detecting, investigating, and responding to threats across large volumes of security telemetry. To make that telemetry useful across sources, Google SecOps uses the Unified Data Model (UDM), a common event schema that provides a consistent structure for security logs. But logs from firewalls, endpoints, identity providers, and other sources all describe and format security events differently.

Most webinar Q&A sessions run out of time before the best questions show up. Ours didn’t. We recently hosted a session on compliance-ready backups, and the questions went far beyond...

In enterprise software, “free” is rarely free. A free year can be a smart commercial incentive. It can also become a financial trap if the real cost, payment terms, and renewal baseline are unclear. When a platform deal looks almost too good to question, CFOs should question it first. Large multi-year incentives can look like a procurement win. They lower the apparent cost of entry, support a consolidation story, and create the impression of immediate savings.

Nearly nine months after launching Cyber Vault for Cohesity, 11:11 Systems continues to advance a cost- and performance-optimized solution for moving a copy of Cohesity backups offsite into immutable AWS S3 object storage. With the recent release of CohesityOS 7.4, the solution has taken its next step. 11:11 Systems is now a named External Target repository type, making it even easier to implement the best practices our data protection experts have built into the Cyber Vault solution.

AI pentesting (AI penetration testing) is the use of reasoning-capable AI models to autonomously find, exploit, and validate security vulnerabilities in running applications — especially the context-dependent flaws, such as broken authorization and business-logic abuse, that traditional scanners cannot detect.

Chrome’s root program decides what certificates will be trusted by Chrome, and what they are allowed to do. Recently, Google decided that client authentication isn’t on the list. Under Chrome Root Program Policy v1.8, every certificate issued on or after March 15, 2027 can assert only one Extended Key Usage (EKU): server authentication. Let’s Encrypt moved early.

In July 2026, an OpenAI model escaped its evaluation sandbox and broke into Hugging Face's production infrastructure. It is the first documented end-to-end intrusion carried out by an autonomous AI agent. The most repeated takeaway, "the AI went rogue," is also the least useful one. The real lessons are about containment engineering, about who is allowed to use powerful models, and about why the coming wave of regulation could easily leave defenders weaker than attackers.