Security News & Blog

Gunra Ransomware Campaign Shows How Edge and OT Vulnerabilities Can Become Gateways to Enterprise-Wide CompromiseThe growing activity associated with the Gunra ransomware operation demonstrates how ransomware groups are…

Jeju Air Customer Data Exposure Shows Why Sensitive Information Must Be Protected at Every LayerThe reported exposure of Jeju Air customer information through Naver highlights an important cybersecurity problem that doe…

BdThemes Supply-Chain Attack Shows How Remote Content Can Turn Trusted WordPress Plugins into BackdoorsThe supply-chain compromise affecting the BdThemes WordPress plugin ecosystem demonstrates how attackers can comprom…

Polish Energy Plant Attack Shows Why a Private APN Must Never Be Treated as a Trusted NetworkThe cyberattack against a small Polish combined heat-and-power plant provides an important warning for operators of industrial…

Independent Solutions Wealth Management Breach Highlights the Growing Cyber Risk Around Financial Services Supply ChainsThe data breach disclosed by Independent Solutions Wealth Management provides another example of ho…

CISA Warning on SonicWall SMA1000 Flaws Shows How VPN Appliances Are Becoming Ransomware Entry PointsCISA’s confirmation that ransomware groups are exploiting two vulnerabilities affecting SonicWall SMA1000 Secure Mobil…

LexisNexis Service Shutdown Highlights the Security Risk Created by Third-Party Hosted InfrastructureLexisNexis’ decision to take several important services offline after detecting suspicious activity on systems operate…

CISA Warning on Actively Exploited Progress LoadMaster Flaw Highlights the Growing Risk Around Edge InfrastructureCISA’s warning that attackers are actively exploiting a critical vulnerability in Progress LoadMaster sho…

AI Assistant’s Gym Website Hack Shows Why Autonomous Agents Need Security Boundaries, Not Just InstructionsThe reported incident in which an AI assistant autonomously exploited vulnerabilities in an Australian gym-booki…

Suisun City Cyberattack Shows Why Municipal Cybersecurity Is Now a Public Safety IssueThe cyberattack that forced Suisun City, California, to shut down its entire computer network and declare a state of emergency demons…

Framework Data Breach Shows Why Analytics Platforms Can Become High-Value Targets for Customer Data TheftThe data breach affecting Framework demonstrates how compromise of a business analytics platform can expose substa…

New CSS Attacks Show How a Malicious Email Can Break Out of the Message and Attack the Webmail InterfaceNew research into the security of HTML email demonstrates that Cascading Style Sheets can become considerably more …