Best Vulnerability Scanning Tool for 2026- Top 10 List
By 2026, vulnerability scanning will no longer be about running a weekly scan and exporting a PDF. Modern environments...
Blog
WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability
Dec 19, 2025Ravie LakshmananVulnerability / Network Security WatchGuard has released fixes to address a critical security flaw in Fireware OS...
Nigeria Arrests RaccoonO365 Phishing Developer Linked to Microsoft 365 Attacks
Dec 19, 2025Ravie LakshmananCybercrime / Law Enforcement Authorities in Nigeria have announced the arrest of three "high-profile internet fraud suspects"...
New UEFI Flaw Enables Early-Boot DMA Attacks on ASRock, ASUS, GIGABYTE, MSI Motherboards
Dec 19, 2025Ravie LakshmananFirmware Security / Vulnerability Certain motherboard models from vendors like ASRock, ASUSTeK Computer, GIGABYTE, and MSI are...
Italian Ferry Malware Attack Sparks International Probe
French intelligence agencies uncovered what appears to be a coordinated foreign interference operation targeting the GNV Fantastic. The post Italian...
Chinese Hackers Exploited a Zero-Day in Cisco Email Security Systems
Cisco disclosed that a China-linked hacking group exploited a previously unknown vulnerability in its email security products, allowing attackers...
Risk Management in Banking: Leveraging AI and Advanced Analytics
Key Takeaways Many risk signals appear long before they become formal issues. AI is most useful when it helps...
LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan
In 2024, ESET researchers noticed previously undocumented malware in the network of a Southeast Asian governmental entity. This led us...
Hewlett Packard Enterprise (HPE) fixed maximum severity OneView flaw
Hewlett Packard Enterprise (HPE) fixed maximum severity OneView flaw Pierluigi Paganini December 18, 2025 Hewlett Packard Enterprise (HPE) fixed a...
RegScale Open Sources OSCAL Hub to Further Compliance-as-Code Adoption
RegScale this week added an open source hub through which organizations can collect and organize compliance data based on...
What is secrets sprawl and how does it impact NHIs
How Secure Are Your Non-Human Identities in the Face of Secrets Sprawl? Is secrets sprawl silently jeopardizing your organization’s...
I am not a robot: ClickFix used to deploy StealC and Qilin
ClickFix is an increasingly common tactic used by threat actors to install malicious software on victims’ devices. It has gone...
Game of clones: Sophos and the MITRE ATT&CK Enterprise 2025 Evaluations
Each year, several security solution providers – including Sophos – sign up for MITRE’s ATT&CK Enterprise Evaluations, a full-scale cyber...
React2Shell flaw (CVE-2025-55182) exploited for remote code execution
Figure 2: Examples of suspicious post-exploitation commands executed on LinuxThe pattern of these commands is consistent. Remote shell scripts or...