When Patching Does Not End the Attack
Overview SonicWall Secure Mobile Access (SMA) 1000 appliances are once again under active attack, only days after SonicWall released patches for a critical vulnerability carrying […]
Month: October 2026
When Pipeline Configuration Becomes the Attack Surface
Overview GitLab has warned customers to immediately patch a maximum-severity vulnerability in its CI/CD Regular Expression Compiler that could allow an unauthenticated attacker to execute […]
Power BI Phishing
Overview A new phishing campaign is abusing Microsoft Power BI to deliver rogue ScreenConnect installations, turning legitimate business technology into a pathway for persistent remote […]
When a WordPress Form Becomes a Remote Code Execution Path
Overview A critical vulnerability in the Bricksforge WordPress plugin is being actively exploited, allowing unauthenticated attackers to upload and execute malicious PHP code on vulnerable […]
When Third-Party Trust Becomes a Data Exposure Risk
Overview A malware incident involving Nippon Columbia Group, a contractor handling customer information for Japanese entertainment company Daiichi Kosho, has raised concerns about the security […]
When Backup Infrastructure Becomes the Attack Path
Overview Attackers are exploiting two vulnerabilities in AhsayCBS, a backup management platform used by organisations, managed service providers and system integrators, to gain unauthorised access, […]
Anthropic OSS Scanner
Overview Anthropic has launched OSS Scanner, an opt-in service designed to use AI models to conduct periodic vulnerability assessments of selected open-source projects at no […]
When the Remote Access Gateway Becomes the Attack Path
Overview A maximum-severity vulnerability in SonicWall SMA1000 appliances is now being targeted by attackers only days after a security update was released. Tracked as CVE-2026-102255, […]
When the Public Internet Becomes a Threat Intelligence Sensor
Overview VirusTotal is expanding its threat intelligence capabilities with daily scanning of the public IPv4 space, providing visibility into exposed services, ports, server fingerprints and […]
Microsoft Teams Deepfake Detection
Overview Microsoft Teams is preparing to introduce synthetic audio and video detection through certified third-party providers, giving organisations another security signal for identifying potentially manipulated […]