Security News & Blog

BdThemes Supply-Chain Attack Shows How Remote Content Can Turn Trusted WordPress Plugins into BackdoorsThe supply-chain compromise affecting the BdThemes WordPress plugin ecosystem demonstrates how attackers can comprom…

Polish Energy Plant Attack Shows Why a Private APN Must Never Be Treated as a Trusted NetworkThe cyberattack against a small Polish combined heat-and-power plant provides an important warning for operators of industrial…

Independent Solutions Wealth Management Breach Highlights the Growing Cyber Risk Around Financial Services Supply ChainsThe data breach disclosed by Independent Solutions Wealth Management provides another example of ho…

CISA Warning on SonicWall SMA1000 Flaws Shows How VPN Appliances Are Becoming Ransomware Entry PointsCISA’s confirmation that ransomware groups are exploiting two vulnerabilities affecting SonicWall SMA1000 Secure Mobil…

LexisNexis Service Shutdown Highlights the Security Risk Created by Third-Party Hosted InfrastructureLexisNexis’ decision to take several important services offline after detecting suspicious activity on systems operate…

CISA Warning on Actively Exploited Progress LoadMaster Flaw Highlights the Growing Risk Around Edge InfrastructureCISA’s warning that attackers are actively exploiting a critical vulnerability in Progress LoadMaster sho…

AI Assistant’s Gym Website Hack Shows Why Autonomous Agents Need Security Boundaries, Not Just InstructionsThe reported incident in which an AI assistant autonomously exploited vulnerabilities in an Australian gym-booki…

Suisun City Cyberattack Shows Why Municipal Cybersecurity Is Now a Public Safety IssueThe cyberattack that forced Suisun City, California, to shut down its entire computer network and declare a state of emergency demons…

Framework Data Breach Shows Why Analytics Platforms Can Become High-Value Targets for Customer Data TheftThe data breach affecting Framework demonstrates how compromise of a business analytics platform can expose substa…

New CSS Attacks Show How a Malicious Email Can Break Out of the Message and Attack the Webmail InterfaceNew research into the security of HTML email demonstrates that Cascading Style Sheets can become considerably more …

Metabase Zero-Day Exploitation Shows Why Analytics Platforms Must Be Treated as Privileged Data InfrastructureThe active exploitation of a zero-day vulnerability affecting Metabase demonstrates how business intelligence…

Nearly 800 Malicious npm Packages Show How Software Dependencies Are Becoming Malware Delivery InfrastructureThe discovery of hundreds of malicious packages in the npm ecosystem demonstrates how software supply-chain at…