This is a section for all my blogs.
PwC Data Breach Claim
Overview The Everest ransomware group claims to have stolen 590.69 GB of data from PwC, including human resources records, training material and internal documents. However, […]
BLOGS
VeloCloud Orchestrator Zero-Day
Overview Arista has warned customers that attackers are actively exploiting a critical SQL injection vulnerability in the VeloCloud Orchestrator (VCO), the central management platform used […]
Capcom Data Breach
Overview Japanese gaming company Capcom has confirmed a data breach affecting more than 11.7 million CAPCOM ID accounts, exposing customer information including email addresses, account […]
When Detection Cannot Keep Up
Overview Cyber attacks are increasingly being conducted at machine speed. Once an attacker obtains a valid credential, token or foothold, automated tooling can enumerate systems, […]
Fortinet Security Update
Overview Fortinet is urging customers to prioritise security updates for FortiOS, FortiManager and FortiAnalyzer following a coordinated security release addressing critical and high-severity vulnerabilities. The […]
Chrome Gemini Scam Detection
Overview Web-based attacks continue to evolve beyond traditional phishing pages and malicious downloads. Modern scams increasingly manipulate users into performing actions that appear legitimate, turning […]
When Critical Business Systems Become the Attack Surface
Overview Oracle’s October 2026 Critical Patch Update delivers a substantial security challenge, with 1,295 security patches released across its software portfolio. The figure represents patches […]
When an Unpatched PHP Server Becomes the Attack Path
Overview PHP is one of the foundations of the modern web, powering applications, content-management platforms and enterprise services across millions of systems. That widespread deployment […]
OpenCode Breach
Overview Open-source AI coding tools are increasingly becoming part of the developer workflow. They can access source code, connect to external AI providers and use […]
When AI Red Teams the Enterprise
Overview ThreatBook has launched RedAgents, a cloud-based platform designed to coordinate multiple AI-powered penetration-testing agents against authorised organisational environments. Rather than relying on a single […]