Metabase Zero-Day Attacks Show How Analytics Platforms Can Become Gateways to Sensitive Business DataThe disclosure of active attacks exploiting a previously unknown SQL injection vulnerability in Metabase demonstrates why analytics platforms must be treated as high-value …
18-Year-Old SCTPhantom Linux Flaw Shows How an Obscure Networking Feature Can Become a Root and Container-Escape VulnerabilityThe disclosure of CVE-2026-64564, named SCT…
New WordPress Pre-Authentication XSS Shows How a Browser-Side Bug Can Escalate into Server CompromiseThe disclosure of CVE-2026-64638 highlights how a vulnerability that…
North Carolina Ports Cyberattack Shows How IT Disruption Can Quickly Become a Supply-Chain ProblemThe cyberattack affecting North Carolina Ports demonstrates how disrupt…
Levi Strauss Cyberattack Shows How Three Compromised Employees Can Become a Corporate Data BreachThe cybersecurity incident disclosed by Le…
ClickFix macOS Infostealer Shows How Social Engineering Is Evolving into Direct Cryptocurrency TheftA newly analysed ClickFix campaign targ…
Cisco’s SD-WAN and IOS XE Security Update Highlights the Risks Concentrated in Network InfrastructureCisco’s release of patches for 12 vuln…
Zapscape KVM Vulnerability Shows How Nested Virtualization Can Undermine Guest-to-Host IsolationThe disclosure of a new Linux KVM vulnerabi…
TONTOU Attack Shows How Interrupts Can Bypass Modern Spectre v2 DefencesThe discovery of a new speculative-execution attack known as TONTOU…
Swiss Government SharePoint Breach Shows Why Patching Must Be Combined with Credential and Server RecoveryThe cyberattack affecting Microso…
WebKit Proxy Bypasses Show How Browser Features Can Undermine IP PrivacyThe discovery of proxy bypasses in Apple’s WebKit browser engine de…
Thousands of Internet-Exposed Rockwell PLCs Highlight Growing Risks to Water and Critical InfrastructureThe discovery of more than 4,400 Ro…
CISA Flags Actively Exploited TeamCity Vulnerability Threatening CI/CD PipelinesCISA’s decision to add CVE-2026-63077 to its Known Exploite…
Actively Exploited TeamCity Flaw Threatens Software Builds and CI/CD Supply ChainsCISA’s addition of CVE-2026-63077 to its Known Exploited …
Fake COLDCARD Security Audit Uses ScreenConnect to Gain Remote Access to Cryptocurrency UsersA phishing campaign impersonating COLDCARD dem…