When Trust Boundaries Become Attack Paths
Overview Two vulnerabilities affecting Microsoft SharePoint Server and MikroTik RouterOS have been added to CISA’s Known Exploited Vulnerabilities catalogue following evidence of active exploitation. The […]
Month: September 2026
Why ScreenConnect Keeps Getting Flagged by Security Platforms
Overview ConnectWise ScreenConnect is a legitimate remote monitoring and management platform widely used by IT departments, managed service providers and support teams. Yet ScreenConnect regularly […]
Microsoft Titan Flaw Exposed
Overview A 16-year-old security researcher known as Faav discovered a serious authentication weakness in Microsoft’s internal Titan analytics platform that could potentially have exposed access […]
When a Trusted GitHub Action Quietly Becomes Malicious Again
Overview Two previously compromised GitHub Actions linked to the Mini Shai-Hulud supply-chain campaign briefly became accessible again months after their original compromise, allowing malicious code […]
When a Trusted GitHub Action Quietly Becomes Malicious Again
Overview Two previously compromised GitHub Actions linked to the Mini Shai-Hulud supply-chain campaign briefly became accessible again months after their original compromise, allowing malicious code […]
Samsung MagicINFO Attack
Overview A recent attack involving Samsung MagicINFO demonstrates how an unresolved initial-access vulnerability can turn a seemingly contained security incident into persistent compromise. Attackers exploited […]
Microsoft Is Retiring WDS
Overview Microsoft has announced plans to deprecate Windows Deployment Services (WDS) beginning with the next Windows Server release, signalling the gradual retirement of a deployment […]
When Multi-Tenant Isolation Breaks Down
Overview Cloudflare has fixed a vulnerability in its Containers platform that could allow one customer’s container to recover residual disk data previously used by another […]
When Trusted Cloud Services Become Malware Infrastructure
Overview MacSync malware targeting macOS systems has evolved with a new delivery technique that uses public iCloud calendar events to retrieve commands and additional payloads. […]
NVIDIA Patches 14 Linux Infrastructure Flaws
Overview NVIDIA has released a security update addressing 14 vulnerabilities in its Infrastructure Controller software for Linux, including a critical flaw that could allow unauthenticated […]