Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that's designed to gain surreptitious access to a victim's email correspo…
Denis Skvortsov discovered that xrdp, a Remote Desktop Protocol (RDP) server, was susceptible to an unauthenticated stack-based buffer overflow vulnerability, …
The threat actor known as ToddyCat has been observed adopting new methods to obtain access to corporate email data belonging to target companies, including usi…
Reportedly, Anthropic has restricted OpenAI from accessing the Claude API after noticing an apparent breach…Anthropic Restrict Claude API Access To OpenAI Engi…
Cybersecurity researchers have discovered a critical security vulnerability in artificial intelligence (AI) company Anthropic's Model Context Protocol (MCP) In…
The boundary between cyber and physical security is effectively gone. Attacks that once exploited software vulnerabilities now frequently begin with a compromi…
Cybersecurity researchers have discovered a security flaw in Microsoft's OneDrive File Picker that, if successfully exploited, could allow websites to access a…
Ivanti has released security updates to address two security flaws in Endpoint Manager Mobile (EPMM) software that have been chained in attacks to gain remote …
Cybersecurity researchers have detailed the activities of an initial access broker (IAB) dubbed ToyMaker that has been observed handing over access to double e…
A critical security vulnerability has been disclosed in SailPoint's IdentityIQ identity and access management (IAM) software that allows unauthorized access to…
Privileged accounts are well-known gateways for potential security threats. However, many organizations focus solely on managing privileged access—rather than …
A security analysis of the OvrC cloud platform has uncovered 10 vulnerabilities that could be chained to allow potential attackers to execute code remotely on …
Hewlett Packard Enterprise (HPE) has released security updates to address multiple vulnerabilities impacting Aruba Networking Access Point products, including …
Information stealing malware are actively taking advantage of an undocumented Google OAuth endpoint named MultiLogin to hijack user sessions and allow continuo…
Researchers publicly disclosed a design flaw affecting Google Workspace that allows unauthorized access. While they…Google Workspace Design Flaw Allows Unautho…
F5 has alerted customers of a critical security vulnerability impacting BIG-IP that could result in unauthenticated remote code execution.The issue, rooted in …
A financially motivated threat actor has been outed as an initial access broker (IAB) that sells access to compromised organizations for other adversaries to c…
Multiple severe, remotely exploitable security vulnerabilities have been found in Chromium, including out-of-bounds memory access in V8, CSS, and Fonts ( CVE-2…
Details have emerged about a now-patched flaw in OpenSSH that could be potentially exploited to run arbitrary commands remotely on compromised hosts under spec…
Remote work has always been around, but it gained immense popularity in recent years as…Cybersecurity Challenges for Remote Work on Latest Hacking News | Cyber…
Taking another step towards better user privacy, Brave browser limits how websites access local network…Brave Browser Limits Local Resource Access To Enhance U…
Cloud access security brokers (CASBs) have emerged as vital security checkpoints between cloud-based apps and…Why Employ a Cloud Access Security Broker? on Lat…
The tech provider ConnectWise disclosed a severe remote code execution flaw that exposed thousands of…ConnectWise Addressed Remote Code Execution Flaw Risking …
Researchers discovered a prototype pollution vulnerability in the Blitz.js framework that could lead to remote…Blitz.js Framework Vulnerability Could Allow Rem…
