News Articles
Latest articles, insights, and updates from the blog.
Windows Named Pipes: A Hidden Privilege Escalation Risk
Weak Windows named pipe permissions can let low-privilege malware reach privileged services. Here's how the attack works and how to lock pipes down.
Critical isolated-vm Flaw Enables Sandbox Escape to RCE
A critical type confusion flaw in isolated-vm, a widely used Node.js sandbox library, can let malicious code escape to the host. Patch now.
Atlassian, Splunk Patch Dozens of Severe Flaws
Atlassian and Splunk patched over two dozen vulnerabilities, including high-severity flaws in Bitbucket, Bamboo, Confluence, and Splunk Enterprise.
DOJ Charges 17 Iranian Hackers Tied to Mabna Institute
DOJ unseals new charges against 17 Iran-linked hackers tied to the Mabna Institute, with $10M Rewards for Justice bounties on five suspects.
Fake 'Ransom Busters' Recovery Firms Are Ransomware Actors
Researchers report a ransomware affiliate posing as an incident-recovery service to divert ransom payments. Here's how to verify a real responder.
Windows Server 2022 Nears End of Mainstream Support
Windows Server 2022 exits mainstream support on October 13, 2026. Learn what changes, what still gets patched, and how IT teams should prepare.
Evooo1Bot Malware Hijacks Routers as Traffic Relays
Evooo1Bot, a Mirai-based Linux botnet, is compromising internet-facing routers for DDoS, SSH attacks, and SOCKS5 proxy relays. Here's what to check now.
Bank CISO's Playbook Shows AI's Two-Sided Security Risk
Standard Chartered's group CISO discusses AI-driven threats and defense strategy. Here's what healthcare and small-business teams should learn.
Rapid7 Layoffs, Boeing Network Flaws, Cold-Chain Risks
Rapid7 cuts staff under new CEO, researchers flag Boeing network security gaps, and Danfoss refrigeration controllers show critical flaws.
WordPress 7.0.4 Patches RCE Flaw in Imagick/Ghostscript
WordPress 7.0.4 fixes a High-severity RCE flaw (CVE-2026-65640) affecting sites using Imagick and Ghostscript. Here's who's at risk and how to respond.
WhatsApp Rolls Out Scam Alert to Flag Suspicious Chats
WhatsApp is testing a Scam Alert feature that warns users about messages from unsaved numbers, as Signal adds automatic key verification.
AI Governance Needs Executive Ownership Before Scale
SecurityWeek highlights AI governance as a leadership gap. Learn the security, privacy, and access-control steps organizations should take now.
Stay ahead of cyber threats
Get proactive protection before the next breach makes headlines. Talk to our experts today.