When a PDF Upload Becomes a Server Takeover
Overview A critical vulnerability in Ghostscript demonstrates how an apparently harmless file upload can become a server-level attack path when documents are automatically processed by […]
Month: October 2026
When the Supply Chain Becomes the Attack Surface
Overview Ledger has confirmed that at least one of its hardware wallets linked to cryptocurrency theft contained an unauthorised hardware implant, highlighting a supply-chain threat […]
When Patching the Gateway Is Only the Beginning
Overview Attackers are exploiting two critical Citrix NetScaler zero-day vulnerabilities to deploy a modified remote access tool, demonstrating how quickly an exposed edge device can […]
When Consent Becomes the Weakest Link in Data Sharing
Overview Norway’s Data Protection Authority, Datatilsynet, has fined Xandr, a Microsoft-owned advertising company, $9.6 million (NOK 92 million) for unlawfully processing and sharing sensitive personal […]
When Patching Does Not End the Attack
Overview SonicWall Secure Mobile Access (SMA) 1000 appliances are once again under active attack, only days after SonicWall released patches for a critical vulnerability carrying […]
When Pipeline Configuration Becomes the Attack Surface
Overview GitLab has warned customers to immediately patch a maximum-severity vulnerability in its CI/CD Regular Expression Compiler that could allow an unauthenticated attacker to execute […]
Power BI Phishing
Overview A new phishing campaign is abusing Microsoft Power BI to deliver rogue ScreenConnect installations, turning legitimate business technology into a pathway for persistent remote […]
When a WordPress Form Becomes a Remote Code Execution Path
Overview A critical vulnerability in the Bricksforge WordPress plugin is being actively exploited, allowing unauthenticated attackers to upload and execute malicious PHP code on vulnerable […]
When Third-Party Trust Becomes a Data Exposure Risk
Overview A malware incident involving Nippon Columbia Group, a contractor handling customer information for Japanese entertainment company Daiichi Kosho, has raised concerns about the security […]
When Backup Infrastructure Becomes the Attack Path
Overview Attackers are exploiting two vulnerabilities in AhsayCBS, a backup management platform used by organisations, managed service providers and system integrators, to gain unauthorised access, […]