Cyber Attacks
View all
Microsoft disables 20,000 accounts linked to YAM Store phishing infrastructure
Microsoft and Health-ISAC dismantled infrastructure for a cybercrime marketplace that enabled billions of malicious messages targeting global organisations.
Cloud Security
View all
Vulnerabilities
View all
Vulnerabilities
FBI and Task Force Seize Meth in NY as Russian National Faces Historic Extradition
Federal authorities announce coordinated law enforcement actions involving drug seizures and international legal proceedings in New York.
Vulnerabilities
Apache Answer Stored XSS in Imports Bypasses Markdown Sanitization Through v2.0.2
A low-severity flaw allows unsanitized HTML to persist in imported questions, bypassing standard security filters in Apache Answer installations.
Vulnerabilities
TSG Profleet SQL Injection in Index Endpoint Risks Database Manipulation
A critical SQL injection flaw in TSG Profleet allows attackers to manipulate database records via a specific CGI parameter before a defined date.
Vulnerabilities
My Calendar plugin allows unauthenticated remote code execution via shortcode injection
A critical flaw in the My Calendar WordPress plugin lets attackers overwrite admin credentials and seize full control without logging in.
Data Breaches
View all
Data Breaches
Data Classification Mistakes That Expose Your Infrastructure
Data Breaches
Credit Freezes: 6 Common Misunderstandings That Leave You Exposed
Data Breaches
Email Account Compromise Prevention Checklist for Secure Operations
Data Breaches
Password reuse is a security risk: how to break the chain
Latest news
Vulnerabilities
FileRise Proxy Auth Bypass Lets Attackers Impersonate Admins Without Credentials
Unpatched FileRise instances trusting reverse-proxy headers allow unauthenticated users to hijack admin sessions if the backend port is directly reachable.
Vulnerabilities
Eclipse Vert.x WebSocket Decompression Flaw Enables Zip Bomb Denial of Service
Unbounded memory allocation in WebSocket decompression allows attackers to trigger denial of service via zip bomb payloads in specific versions.
Vulnerabilities
VPN Appliance Vulnerabilities: How Hidden Flaws Compromise Your Privacy
Your remote connection relies on complex software that often contains unpatched flaws, turning your trusted privacy tunnel into a visible corridor for attackers.
Vulnerabilities
Cisco IOS XE Vulnerabilities Explained Simply
Network software flaws allow attackers to bypass security controls without breaking physical locks, exposing data flows to interception or disruption.
Vulnerabilities
Eclipse Jetty Proxy Credential Exposure: Upstream 407 Errors Cause Client Header Leak in Versions Prior to 12.1.12
A flaw in Eclipse Jetty allows destination servers to capture proxy credentials when the client misinterprets authentication errors from upstream services.
Vulnerabilities
Vulnerability Chaining: How Attackers Link Weaknesses
Attackers rarely exploit a single flaw; they chain minor issues to bypass defences and achieve full system control.
Vulnerabilities
Detect Exposed .git Directories: Signs, Logs and Blind Spots
Publicly accessible version control directories reveal entire source code histories, allowing attackers to reconstruct application logic without exploiting runtime vulnerabilities.
Vulnerabilities
Zero-Click Exploits Explained: How Attacks Work Without Your Input
Zero-click exploits bypass user interaction entirely, compromising devices through background processing of standard data packets without any visible prompt.