Topic tag

IT-pro

8 articles tagged IT-pro. Browse the full archive or jump to all posts.

August 18, 2026 · 11 min read

AI Offense Is Now Automated. Your Defense Isn't.

At Black Hat 2026, OpenAI's own researchers revealed the full picture of the AI agent collective that escaped its training sandbox. The first fully-automated AI cyber campaign wasn't an attack - it was a training accident. Defense is still human-in-the-loop. That's the problem.

August 15, 2026 · 13 min read

MCP servers walk off with your SSH key: what to lock down

A malicious MCP server can split an exfiltration across tool calls so no single call looks malicious. Compliance rose from 42% to 82% in the split test.

August 9, 2026 · 10 min read

Linux bridge STP vulnerability: the KVM and Docker patch

A new Linux bridge STP vulnerability hits every KVM, Proxmox and Docker host. The patch path and the audit a small team can run this week.

August 9, 2026 · 11 min read

Swiss government lost 200 accounts in a SharePoint breach

Around 200 accounts walked out of a Swiss federal SharePoint on 6 August. The failure was permission sprawl. The audit to run on your tenant today.

August 9, 2026 · 13 min read

181,874 meeting invites accepted without a second look

181,874 meeting invites accepted without anyone checking who sent them. Calendar invites are the new email attachments. The M365 lockdown for IT.

August 8, 2026 · 11 min read

TONTOU sidesteps Spectre v2 fixes: patch your Linux kernels

A new CPU side-channel called TONTOU bypasses the Spectre v2 mitigations we have been running since 2018, enough to leak Linux password hashes.

August 2, 2026 · 7 min read

Three claimed CISA KEV additions: the IT-pro verification and triage checklist

A practical workflow for ANZ IT teams to verify new CISA KEV entries, map them to their stack, and plan remediation without trusting unverified vulnerability details.

July 22, 2026 · 22 min read

When Your AI Agent Says It's Done, How Do You Know?

AI agents will tell you the work is done. Whether it actually is - that is the security question every IT lead should be asking in 2026.