Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV
î „Ravie Lakshmananî ‚May 23, 2026Vulnerability / Website Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched...
SecurityThe
Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE
î „Ravie Lakshmananî ‚May 05, 2026Vulnerability / Server Security The Apache Software Foundation (ASF) has released security updates to address several security...
Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia
î „Ravie Lakshmananî ‚May 04, 2026Malware / Network Security The China-based cybercrime group known as Silver Fox has been linked to a...
CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV
î „Ravie Lakshmananî ‚May 03, 2026Vulnerability / Container Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a recently...
CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV
î „Ravie Lakshmananî ‚Apr 29, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security...
CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline
î „Ravie Lakshmananî ‚Apr 25, 2026Network Security / Infrastructure Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added four...
CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline
î „Ravie Lakshmananî ‚Apr 25, 2026Network Security / Infrastructure Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added four...
NASA Employees Duped in Chinese Phishing Scheme Targeting U.S. Defense Software
î „Ravie Lakshmananî ‚Apr 24, 2026Espionage / National Security, The Office of Inspector General (OIG) of the U.S. National Aeronautics and Space...
CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software
î „Ravie Lakshmananî ‚Apr 14, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added half a dozen...
APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies
î „Ravie Lakshmananî ‚Apr 08, 2026Vulnerability / Cloud Security The Russian threat actor known as APT28 (aka Forest Blizzard and Pawn Storm) has...
CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation
î „Ravie Lakshmananî ‚Mar 28, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical...
Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in New Mass Attacks
î „Ravie Lakshmananî ‚Mar 26, 2026Malware / Mobile Security The kernel exploit for two security vulnerabilities used in the recently uncovered Apple...
DoJ Disrupts 3 Million-Device IoT Botnets Behind Record 31.4 Tbps Global DDoS Attacks
î „Ravie Lakshmananî ‚Mar 20, 2026Botnet / Network Security The U.S. Department of Justice (DoJ) on Thursday announced the disruption of command-and-control...
CISA Flags Actively Exploited Wing FTP Vulnerability Leaking Server Paths
î „Ravie Lakshmananî ‚Mar 17, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a medium-severity...
Are scalable cloud-native security solutions the future
How Can Non-Human Identities Revolutionize Cloud Security? The question of how to effectively manage Non-Human Identities (NHIs) is gaining...