News Articles
Latest articles, insights, and updates from the blog.
Critical isolated-vm Flaw Enables Sandbox Escape to RCE
A critical type confusion flaw in isolated-vm, a widely used Node.js sandbox library, can let malicious code escape to the host. Patch now.
Atlassian, Splunk Patch Dozens of Severe Flaws
Atlassian and Splunk patched over two dozen vulnerabilities, including high-severity flaws in Bitbucket, Bamboo, Confluence, and Splunk Enterprise.
DOJ Charges 17 Iranian Hackers Tied to Mabna Institute
DOJ unseals new charges against 17 Iran-linked hackers tied to the Mabna Institute, with $10M Rewards for Justice bounties on five suspects.
Fake 'Ransom Busters' Recovery Firms Are Ransomware Actors
Researchers report a ransomware affiliate posing as an incident-recovery service to divert ransom payments. Here's how to verify a real responder.
Windows Server 2022 Nears End of Mainstream Support
Windows Server 2022 exits mainstream support on October 13, 2026. Learn what changes, what still gets patched, and how IT teams should prepare.
Evooo1Bot Malware Hijacks Routers as Traffic Relays
Evooo1Bot, a Mirai-based Linux botnet, is compromising internet-facing routers for DDoS, SSH attacks, and SOCKS5 proxy relays. Here's what to check now.
Bank CISO's Playbook Shows AI's Two-Sided Security Risk
Standard Chartered's group CISO discusses AI-driven threats and defense strategy. Here's what healthcare and small-business teams should learn.
Rapid7 Layoffs, Boeing Network Flaws, Cold-Chain Risks
Rapid7 cuts staff under new CEO, researchers flag Boeing network security gaps, and Danfoss refrigeration controllers show critical flaws.
WordPress 7.0.4 Patches RCE Flaw in Imagick/Ghostscript
WordPress 7.0.4 fixes a High-severity RCE flaw (CVE-2026-65640) affecting sites using Imagick and Ghostscript. Here's who's at risk and how to respond.
WhatsApp Rolls Out Scam Alert to Flag Suspicious Chats
WhatsApp is testing a Scam Alert feature that warns users about messages from unsaved numbers, as Signal adds automatic key verification.
AI Governance Needs Executive Ownership Before Scale
SecurityWeek highlights AI governance as a leadership gap. Learn the security, privacy, and access-control steps organizations should take now.
Ghostjacking: When AI Agents Read Poisoned Security Logs
A new attack called Ghostjacking hides instructions in security logs so AI agents execute them automatically. Here's how it works and how to defend.
Stay ahead of cyber threats
Get proactive protection before the next breach makes headlines. Talk to our experts today.