News archive
Showing 24 of 139 articles. Use the numbered pages to browse the complete archive.
CISA added Gitea CVE-2026-60004 to the KEV catalog on August 25 after attackers used the diffpatch endpoint to plant Git hooks and drop miners. Federal deadline: August 28.
Attackers are exploiting an unauthenticated command injection in Zimbra's SNMP notification path. Patch to 10.1.20, then hunt for web shells dropped by the zimbra user.
Phishing attacks are evolving with AI and multi-channel tactics. Learn the immediate actions and technical details IT pros need for robust detection and response.
A critical authentication bypass vulnerability (CVE-2025-61757) in Oracle Identity Manager is being actively exploited. Learn how to protect your systems now.
Oracle warns that CVE-2026-21992 is a critical, unauthenticated HTTP remote-code-execution flaw affecting specific Oracle Identity Manager and Web Services Manager versions.
Traditional antivirus is not enough. Learn how Endpoint Detection and Response (EDR) provides the visibility and tools to stop sophisticated cyberattacks.
A major API vulnerability at Dell exposed 49 million customer records. Learn the technical details, immediate actions for IT pros, and how to prevent it.
A critical API vulnerability, Broken Object Level Authorization (BOLA), is leaving millions of user records exposed. Learn how to protect your systems now.
Unsecured cloud services are a leading cause of data breaches. Learn to identify and fix common cloud security misconfigurations before they are exploited.
As AI-powered ransomware evolves in 2026, legacy defenses are obsolete. Learn crucial strategies to protect your organization from advanced persistent threats.
Recent vulnerabilities highlight critical API security risks. Learn how to protect your systems from data breaches and unauthorized access. Actionable advice for IT pros.
A deep dive into the Security Operations Center (SOC), the people, processes, and technology that form the core of modern cybersecurity defenses.
Learn how to implement effective Data Loss Prevention (DLP) strategies to protect your organization's sensitive data from breaches and insider threats.
Essential strategies for implementing robust vulnerability management programs that identify, assess, and remediate security weaknesses before attackers exploit them.
This week's top cybersecurity alerts: critical vulnerabilities in enterprise software, active ransomware campaigns, and essential security patches.
Initial access brokers are selling network credentials to ransomware gangs, making prevention critical. Organizations must strengthen authentication and monitor for compromised credentials before attackers strike.
Law enforcement agencies are taking down ransomware access broker networks that sell entry points into corporate systems. These disruptions cut off critical supply chains that enable devastating cyberattacks.
A Russian access broker received prison time for enabling ransomware attacks by providing cybercriminals entry to corporate networks. This case highlights ongoing efforts to dismantle the infrastructure supporting ransomware operations.
Organizations must act immediately when critical network vulnerabilities are discovered as attackers exploit them within hours. Effective incident response requires pre-planned procedures, rapid patching, and coordinated communication across security teams.
Citrix NetScaler vulnerabilities pose critical risks to enterprise networks, enabling attackers to gain unauthorized access and compromise sensitive data. Organizations must immediately patch affected systems and implement security controls to prevent exploitation before threat actors strike.
Oracle released an emergency patch for a critical vulnerability in Identity Manager (CVE-2026-21992) that allows remote attackers to take complete control of affected systems. Organizations must apply this out-of-band security update immediately.
BYOVD attacks exploit legitimate signed drivers to bypass security controls and gain kernel-level access to systems. Organizations must implement driver allowlisting and monitor for suspicious driver activity to prevent attackers from weaponizing trusted software against them.
Attackers are exploiting driver-level vulnerabilities to bypass EDR security tools, putting critical systems at risk. Organizations must update defenses immediately to detect and block these advanced evasion techniques.
Ransomware attacks and zero-day exploits demand immediate action before critical data is compromised. Organizations need robust incident response plans to detect, contain, and recover from these threats quickly.