Security News & Blog

Metabase Zero-Day Exploitation Shows Why Analytics Platforms Must Be Treated as Privileged Data InfrastructureThe active exploitation of a zero-day vulnerability affecting Metabase demonstrates how business intelligence…

Nearly 800 Malicious npm Packages Show How Software Dependencies Are Becoming Malware Delivery InfrastructureThe discovery of hundreds of malicious packages in the npm ecosystem demonstrates how software supply-chain at…

Nearly 800 Malicious npm Packages Show How Software Dependencies Are Becoming Malware Delivery InfrastructureThe discovery of hundreds of malicious packages in the npm ecosystem demonstrates how software supply-chain at…

CISA Adds Actively Exploited Progress LoadMaster RCE to KEV CatalogCISA’s addition of CVE-2026-8037 to its Known Exploited Vulnerabilities Catalog should trigger immediate action from organizations operating Progress Ke…

Unlimited Technology Systems Breach Exposing 3.8 Million Patients Highlights the Growing Risk of Healthcare Data ConcentrationThe data breach affecting Unlimited Technology Systems demonstrates the enormous security con…

Metabase Zero-Day Attacks Show How Analytics Platforms Can Become Gateways to Sensitive Business DataThe disclosure of active attacks exploiting a previously unknown SQL injection vulnerability in Metabase demonstrates …

18-Year-Old SCTPhantom Linux Flaw Shows How an Obscure Networking Feature Can Become a Root and Container-Escape VulnerabilityThe disclosure of CVE-2026-64564, named SCTPhantom by Tencent Zhuque Lab, demonstrates how vu…

New WordPress Pre-Authentication XSS Shows How a Browser-Side Bug Can Escalate into Server CompromiseThe disclosure of CVE-2026-64638 highlights how a vulnerability that initially appears to be a browser-side cross-site…

North Carolina Ports Cyberattack Shows How IT Disruption Can Quickly Become a Supply-Chain ProblemThe cyberattack affecting North Carolina Ports demonstrates how disruption of ordinary information technology systems can…

Levi Strauss Cyberattack Shows How Three Compromised Employees Can Become a Corporate Data BreachThe cybersecurity incident disclosed by Levi Strauss & Co. demonstrates how social engineering can allow attackers to bypa…

ClickFix macOS Infostealer Shows How Social Engineering Is Evolving into Direct Cryptocurrency TheftA newly analysed ClickFix campaign targeting macOS users demonstrates how attackers are combining social engineering, c…

Cisco’s SD-WAN and IOS XE Security Update Highlights the Risks Concentrated in Network InfrastructureCisco’s release of patches for 12 vulnerabilities affecting Catalyst SD-WAN and IOS XE Software highlights the serious…