You're subscribed.

Your first issue of The it-learn Brief will land in your inbox on the next weekday morning.

Every issue includes breaking CVEs, MITRE ATT&CK-mapped deep dives, copy-paste detection queries, and specific defender action items — the technical depth that keeps you sharp in customer conversations and on the job.

📬 Catch up on the latest briefs

• PAN-OS IKEv2 and DNS Proxy RCEs — CVE-2026-0263 CVE-2026-0263 and CVE-2026-0264 deliver RCE in PAN-OS VPN and DNS processing. FortiClient EMS CVE-2026-35616 exploited in the wild. May 29, 2026
• Carnival Breach — ShinyHunters Steal 5.9M Records ShinyHunters breach Carnival for 5.9M records. Google unifies Mandiant, Wiz, and Gemini. JINX-0164 deploys macOS backdoors against crypto … May 28, 2026
• FBI Warns Silent Ransom Group Walking Into Law Firms FBI flash alert on Silent Ransom Group USB attacks at law firms. LA Metro attributed to Iranian APT. SymJack weaponizes AI coding agents. … May 27, 2026
• CISA Mandates 48-Hour Drupal Patch — Active SQLi CISA orders 48-hour Drupal patching for active SQLi exploitation, Dutch police seize 800 bulletproof hosting servers, Iran APT hits aviation … May 26, 2026
• Megalodon Poisons 5,500+ GitHub Repos Megalodon injects malicious workflows into 5,500+ GitHub repos, CVE-2026-26980 Ghost CMS zero-day exploited, TrapDoor plants 34 packages on … May 25, 2026