Articles by SecurityXP Editorial Desk

SecurityXP Editorial Desk Vulnerability Research & News Board

Automated and analyst-reviewed threat intelligence briefings tracking active exploitation campaigns, CVE disclosures, and extortion group activity.

Twitter LinkedIn

View Articles

Published Database (104)

Security OperationsJun 5, 2026·2 min read

71% of SOCs Report AI Is Underdelivering. The Second Wave Must Fix It.

Eighteen months ago, the AI SOC was a marketing line. Today it is a budget item.

Data BreachesJun 5, 2026·2 min read

Attackers Weaponize AI Chatbot Trust to Hijack GPUs and Mine Crypto

Microsoft has spotted something new. Attackers are manipulating SEO rankings and AI chatbot recommendations to push fake utilities onto users who trust what the AI tells them.

Threat IntelligenceJun 5, 2026·2 min read

Gulf Executives Face Surge in WhatsApp Impersonation Attacks

It starts with a message. A senior executive at a Dubai energy firm opens WhatsApp and sees what looks like a text from their CEO.

Vulnerabilities & ExploitsJun 4, 2026·2 min read Breaking

Acer addresses critical zero-day vulnerabilities in Wave 7 routers

The vulnerability allows unauthenticated attackers to access sensitive credentials from log archives. It's a broken access control flaw, which enables attackers to obtain plaintext credentials.

Vulnerabilities & ExploitsJun 4, 2026·3 min read

B&R PPT30 Operating System

This operating system is widely used in industrial automation worldwide. The issue affects versions prior to 1.8.0.

Vulnerabilities & ExploitsJun 4, 2026·2 min read

Can Someone Please ELI5 - "YellowKey" (CVE-2026-45585) to me? (an IT admin that survived the Great Global CrowdStrike Outage of 24)

The vulnerability, identified as CVE-2026-45585, has significant implications for organizations using Windows PE, versions 10 and 11, and CrowdStrike, versions 6.0 and later.

Vulnerabilities & ExploitsJun 4, 2026·2 min read

CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog

This vulnerability, tracked as CVE-2026-45247, has a CVSS score of 9.8. Cybersecurity and Infrastructure Security Agency added this flaw to its Known Exploited Vulnerabilities catalog.

Vulnerabilities & ExploitsJun 4, 2026·2 min read

Cisco Unified Communications Manager Vulnerability Exposed Along With PoC Exploit Code

This vulnerability, identified as CVE-2026-20230, has a CVSS score of 8.6. That's a significant threat.

Vulnerabilities & ExploitsJun 4, 2026·4 min read

Hitachi Energy ITT600 Explorer

The vulnerability, identified as CVE-2024-8176, can be exploited to carry out a Denial of Service attack on the product, potentially disrupting essential services in the energy sector.

TechnologyJun 4, 2026·6 min read

ICANN sets the October 2026 DNS trust anchor rollover

The Domain Name System, or DNS, is getting a major update to its security protocol. This update, scheduled for October 2026, affects the DNS Security Extensions root zone Key Signing Key, a crucial co...

Identity & Access ManagementJun 4, 2026·4 min read

Offroad Emerges From Stealth With $7 Million to Tackle Enterprise Identity Risk

The company just landed $7 million in seed funding, led by Ibex Investors and Skywell Capital, which is a big deal. This investment is a significant milestone for Offroad, marking a new chapter in its...

Commentary / OpinionJun 3, 2026·2 min read

Code is cheap

It's counterintuitive, given the significant cost of producing code, including salaries and headcount. But there's a crucial distinction between production costs and the value of the code itself.

Vulnerabilities & ExploitsJun 3, 2026·2 min read Breaking

Google Patches Android Zero-Day CVE-2025-48595 Exploited in Targeted Attacks

One flaw, CVE-2025-48595, is particularly alarming. This vulnerability has a CVSS score of 8.4.

AI/ML SecurityJun 3, 2026·2 min read Breaking

Hackers Used Meta's AI Support Bot to Seize Instagram Accounts

High-profile Instagram profiles, including those of former US President Barack Obama, the U.S. Space Force, and Sephora, were compromised after attackers social engineered Meta's AI-powered support assistant.

TechnologyJun 3, 2026·3 min read

Two-year old Oracle WebLogic Server vulnerability is being exploited

This was patched by Oracle in July 2024. The vulnerability allows an unauthenticated attacker with network access to take control of susceptible Oracle WebLogic Server instances.

Vulnerabilities & ExploitsJun 3, 2026·2 min read

U.S. CISA adds Android and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

Cybersecurity and Infrastructure Security Agency, CISA, has just added two significant vulnerabilities to its Known Exploited Vulnerabilities catalog.

TechnologyJun 2, 2026·2 min read

Google fixes one actively exploited Android zero-day, 124 flaws

One of them, a high-severity zero-day flaw in the Android Framework component, is tracked as CVE-2025-48595. This vulnerability is serious.

TechnologyJun 2, 2026·2 min read

Infected Red Hat npm packages expose developer credentials

This malware is a new variant of the Shai-Hulud credential-stealing malware. It's designed to steal developer credentials, cloud secrets, SSH keys, CI/CD tokens, and other sensitive information.

TechnologyJun 1, 2026·3 min read

Critical Windows Netlogon RCE flaw now exploited in attacks

This vulnerability, tracked as CVE-2026-41089, has a CVSS score of 9.8. It's a stack-based buffer overflow issue that could be exploited via crafted network requests.

TechnologyJun 1, 2026·2 min read

CVE-2026-0826: Critical unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (FIXED)

Hackers can exploit this vulnerability, CVE-2026-0826, to achieve unauthenticated remote code execution with root privileges on a target device.

TechnologyMay 31, 2026·3 min read

Carnival Data Breach Impacts Nearly 6 Million Customers

According to filings with the Maine Attorney General , the cruise operator is sending notification letters to 5,995,277 customers and employees. Hackers got in and exfiltrated sensitive files.

Vulnerabilities & ExploitsMay 31, 2026·3 min read

Active Exploitation of PAN-OS GlobalProtect Gateways (CVE-2026-0257) Triggers Urgent Patches

Attackers are actively exploiting a high-severity authentication bypass vulnerability in Palo Alto Networks GlobalProtect portals and gateways, allowing remote attackers to establish unauthorized VPN access to corporate networks.

TechnologyMay 29, 2026·4 min read

7-Eleven Data Breach Exposes Personal Information of 185,000 People

The ShinyHunters extortion gang claimed responsibility, leaked a 9.4GB archive of stolen data, and is now selling it on underground forums after the company refused to pay a ransom.

TechnologyMay 29, 2026·5 min read

FBI Warns of Kali365: The Fast-Growing Phishing Kit Stealing Microsoft 365 Access Tokens

By exploiting legitimate OAuth device code authentication, Kali365 bypasses multi-factor authentication entirely... and that's a game-changer.

TechnologyMay 29, 2026·4 min read

Ghost CMS Flaw Abused to Push ClickFix Attacks on Hundreds of Sites

and it's getting out of hand. Over 700 legitimate domains have been poisoned, including university portals and major technology brands.

Vulnerabilities & ExploitsMay 26, 2026·2 min read Breaking

Critical VMware Zero-Day Vulnerability Under Active Exploitation

A critical remote code execution vulnerability in VMware vCenter Server is being actively exploited in the wild. CVE-2025-1234 carries a CVSS score of 9.8 and affects all recent versions. Immediate patching is recommended.

Malware & RansomwareMay 25, 2026·1 min read

Ransomware Attack Disrupts Major Healthcare Provider Operations

A sophisticated ransomware attack has disrupted operations at a major healthcare provider, affecting patient care systems across multiple facilities. Learn about the attack vectors, impact, and mitigation strategies.

AI/ML SecurityMay 24, 2026·1 min read

New EU AI Security Regulations: What Organizations Need to Know

The European Union has introduced comprehensive AI security regulations requiring organizations to implement security measures for AI systems. We break down the requirements, timelines, and compliance steps.

Threat IntelligenceSep 18, 2025·3 min read

CISA Issues Nine Urgent Advisories on Industrial Control Systems Vulnerabilities

In a critical bulletin released on September 18, 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) published nine new advisories detailing high-severity vulnerabilities affecti...

Threat IntelligenceSep 18, 2025·2 min read

Critical Google Chrome Zero-Day CVE-2025-10585: What You Need to Know

Google has just patched a critical zero-day vulnerability in its Chrome web browser—CVE-2025-10585—which has been actively exploited in the wild. This flaw, a type confusion issue in Chrome’s V8 Ja...

Threat IntelligenceSep 18, 2025·4 min read

Malware Analysis Report on a malicious listener deployed on Ivanti Endpoint Manager Mobile (EPMM) systems

U.S. Cybersecurity and Infrastructure Security Agency’s new Malware Analysis Report on a malicious listener deployed on Ivanti Endpoint Manager Mobile (EPMM) systems by chaining CVE-2025-4427 and C...

Threat IntelligenceJun 22, 2025·5 min read

MSSP Alert Top 250 for 2024: A Deep Dive into the State of Cybersecurity

Discover the key findings from the 2024 MSSP Alert Top 250 report. Explore trends in MSSP growth, profitability, in-house SOCs, and the critical services defining modern cyber defense.

Threat IntelligenceApr 26, 2025·4 min read

Pakistan-Linked APT36 Exploits "Pahalgam Terror Attack" Theme in Multi-Pronged Cyber Espionage Campaign Against India

In a recent and concerning development in the ongoing cyber conflict landscape, the Pakistan-linked Advanced Persistent Threat (APT) group known as APT36 (also referred to as Transparent Tribe) has...

Threat IntelligenceMar 25, 2025·10 min read

Unpacking CVE-2025-29927: A Deep Dive into the Next.js Path Traversal Vulnerability

Next.js has rapidly become a dominant force in the React ecosystem, lauded for its developer experience and performance optimizations. However, like any complex framework, it's not immune to securi...

Threat IntelligenceSep 7, 2024·6 min read

MITRE ATT&CKcon 5.0: Elevating Cybersecurity Knowledge

Cybersecurity remains at the forefront of the global conversation, and MITRE ATT&CKcon 5.0 is a pivotal event in the field. Scheduled for October 22-23, 2024, in McLean, Virginia, the conference se...

Cloud SecuritySep 5, 2024·3 min read

A CyberRisk Alliance Resource: MSSP Alert – Top 250 MSSPs Service Providers 2023 Edition

As cyber threats evolve, so do the strategies to combat them. The latest MSSP Alert: Top 250 MSSPs Service Providers 2023 Edition , released by CyberRisk Alliance , offers valuable insights in

Cloud SecurityApr 13, 2024·4 min read

Securing the Clouds: The Top 10 CSPM Tools Shaping Cloud Security

Introduction In the rapidly evolving landscape of cloud computing, security stands as a paramount concern for organizations across the globe. Cloud Security Posture Management (CSPM) tools have eme...

Cloud SecurityNov 4, 2023·16 min read

MITRE ATT&CK version 14

I. Introduction: Importance of staying updated with frameworks like MITRE ATT&CK In the realm of offensive security, staying updated with frameworks like MITRE ATT&CK is pivotal. It provides a stru...

Cloud SecurityMay 15, 2023·2 min read

Optimizing Security with OPSWAT Solutions

OPSWAT provides advanced cybersecurity solutions that help organizations optimize security measures.

Vulnerabilities & ExploitsMay 14, 2023·3 min read

Leading Vulnerability Scanners: Benefits and Use Cases

Leading vulnerability scanners provide comprehensive security assessment and management capabilities, allowing organizations to identify and remediate potential vulnerabilities in their IT infrastructure. From real-time scanning to automated reporting, these tools offer a range of benefits and use cases, helping businesses to mitigate risks, meet compliance requirements, and enhance overall security posture.

Cloud SecurityMay 13, 2023·3 min read

Centralized Log Management & SIEM Solutions: Benefits & Top Picks

Centralized Log Management & SIEM Solutions: Benefits & Top Picks Centralized log management and SIEM solutions are crucial components of modern IT security infrastructure. They allow businesses to monitor and analyze network activity, detect potential threats, and respond to incidents in real-time. In this article, we’ll explore the benefits of centralized log management and SIEM solutions, and recommend some of the top picks in the market.

Cloud SecurityMay 12, 2023·3 min read

DevsecOps: Advantages of Multi-Level Application Security Testing

DevsecOps: Multi-Level App Security Testing DevsecOps, an evolution of DevOps, introduces security teams early in the development cycle. This approach enables continuous application security testing across multiple levels, providing a comprehensive security posture. With DevsecOps, organizations can leverage automation, collaboration, and continuous feedback, reducing the time to detect and remediate vulnerabilities.

Cloud SecurityMay 11, 2023·4 min read

Optimizing IT Operations with Top CMDB Solutions

A Configuration Management Database (CMDB) is a critical component of IT operations. It provides a central repository of an organization's IT assets and their relationships, enabling efficient management of IT infrastructure. Top CMDB solutions offer various features, including automated discovery, data reconciliation, and visualization, that help organizations optimize IT operations. By leveraging the capabilities of CMDB solutions, organizations can reduce the time and effort spent on managing IT assets, ensure compliance, and improve overall IT efficiency.

Threat IntelligenceMay 8, 2023·21 min read

MITRE ATT&CK version 13

MITRE ATT&CK version 13 has been recently launched, bringing some significant updates. These include: Key website enhancements Increased focus on cloud and Linux coverage More detailed det...

Cloud SecurityMay 5, 2023·3 min read

Leading DLP Solutions: Maximizing Data Protection

As data breaches continue to rise, it's vital for organizations to implement and maintain effective Data Loss Prevention (DLP) solutions. Leading DLP solutions offer comprehensive protection by monitoring and controlling data flow, identifying sensitive information, and enforcing policies to prevent leaks. With the right implementation and configuration, businesses can maximize data protection and avoid costly and damaging breaches.

Cloud SecurityMay 3, 2023·4 min read

Maximizing Efficiency: Top MDM Solutions & Benefits

Maximizing efficiency in today's business landscape requires powerful tools. MDM solutions provide the necessary capabilities to manage data and streamline operations. Read on to learn more about the top MDM solutions and the benefits they offer.

Cloud SecurityMay 1, 2023·4 min read

Exploring Top RASP Solutions for Secure Web Applications

As web applications become increasingly complex, the need for robust security measures becomes all the more important. One key solution that is gaining in popularity is RASP, or Runtime Application Self-Protection. Here, we take a closer look at some of the top RASP solutions available today, and how they can help to safeguard your web applications against a range of threats.

Cloud SecurityMay 1, 2023·3 min read

Maximizing Online Security: Top DNS Filtering Solutions

With the increasing number of cyber attacks, it has become crucial to prioritize online security. One of the most effective ways to do so is by implementing DNS filtering solutions. These solutions not only block malicious websites but also prevent data theft and malware attacks. In this article, we will be discussing the top DNS filtering solutions that can help maximize online security.

Compliance & PrivacyFeb 26, 2023·2 min read

CISA Updates Best Practices for MITRE ATT&CK® Mapping

To protect networks and data, CISA believes that understanding the behavior of adversaries is crucial. The success of network defenders in detecting and mitigating cyberattacks depends on this unde...

Threat IntelligenceOct 25, 2022·13 min read

ATT&CK v12 is now accessible! Revisions – October 2022

Updates to Techniques, Groups, and Software for Enterprise, Mobile, and ICS are included in the October 2022 (v12) ATT&CK release. The addition of detections to ATT&CK for ICS and the inclusion of ...

Cloud SecurityOct 20, 2022·5 min read

Google Announcing GUAC, a great pairing with SLSA (and SBOM)!

The industry is collectively aware of the importance of supply chain security. Recent events include a sharp increase in software supply chain attacks, a catastrophic severity and breadth Log4j vul...

Cloud SecurityOct 19, 2022·8 min read

Canarytokens. org - Rapid, Free, Mass Detection

Introduction Web bugs, the transparent images that monitor email opening, are probably already familiar to you. They operate by inserting a special URL in the image tag of a page and keeping an ey

Threat IntelligenceOct 18, 2022·5 min read

Critical Fortinet auth bypass bug has an exploit available; apply the patch now

A critical authentication bypass flaw affecting Fortinet's FortiOS, FortiProxy, and FortiSwitchManager appliances now has proof-of-concept exploit code available. Attackers can get around the authe...

Compliance & PrivacyOct 18, 2022·9 min read

Micro Emulation Plans by MITRE-Engenuity

We enjoy imitating the opposition. In fact, it's so important that they've written, spoken, trained on it, and are still developing and disseminating more emulation plans (including one of the fir...

Threat IntelligenceOct 18, 2022·7 min read

Organizations in Poland and Ukraine are affected by the new "Prestige" ransomware.

The Microsoft Threat Intelligence Center (MSTIC) has found evidence of a novel ransomware campaign using a hitherto unidentified ransomware payload that targets businesses in the logistics and tran...

Cloud SecurityOct 17, 2022·18 min read

Cloud Web Application and API Protection Magic Quadrant

The market for protecting cloud web applications and APIs is expanding quickly. You can use this Magic Quadrant to find cloud WAAP providers that provide simple controls and specialised defences ag...

Cloud SecurityOct 17, 2022·6 min read

Serverless Top security best practices

Describe serverless. A cloud execution model is serverless computing. It enables users and developers to create and use applications and services without having to worry about servers. Applications...

Cloud SecurityOct 16, 2022·9 min read

Voice of the Customer: Web Application and API Protection, Gartner Peer Insights

What is API and Web Application Protection? Web application and API protection (WAAP), according to Gartner, is the evolution of the web application firewall (WAF) market, which now includes four c...

Compliance & PrivacyOct 14, 2022·16 min read

MITRE ATT&CK® Released Updates in Apr 2022 With Additional Techniques and Structuring

The Techniques, Groups, and Software for Enterprise, Mobile, and ICS are updated in the April 2022 (v11) ATT&CK release. The most significant modifications are the reorganisation of Detections, whi...

Cloud SecurityOct 14, 2022·2 min read

OWASP Threat Dragon : open-source threat modeling tool from OWASP

Threat modelling is regarded as a potent method for incorporating security into application design at an early stage of the secure development lifecycle. It is most effective when used for: ensurin...

Cloud SecurityOct 14, 2022·1 min read

The Microsoft Threat Modeling Tool (TMT)

A crucial component of the Microsoft Security Development Lifecycle is the Threat Modeling Tool (SDL). Early detection and mitigation of potential security issues, when they are still manageable an...

Cloud SecurityOct 13, 2022·3 min read

IriusRisk Threat Modeling for Security and Development Teams

Threat modelling: what is it? Basics of Threat Modeling Threat modeling's fundamental tenet is the identification, disclosure, and management of security flaws. This is accomplished by being aware of

Cloud SecurityOct 13, 2022·3 min read

Threat Modeling: Choosing the Right Method for Your Business

Why Threat Modeling Is Important and What It Is Identifying and evaluating threats that an attacker (threat) could exploit is done through the exercise of threat modelling. Consider a threat model ...

Cloud SecurityOct 12, 2022·5 min read

Kenna: RISK-BASED VULNERABILITY MANAGEMENT

Why You Should Consider More Than CVSS As previously mentioned, one typical method of sorting and prioritising which vulnerabilities to fix first is patching vulnerabilities that have a CVSS score in

Cloud SecurityOct 8, 2022·2 min read

A Holistic Performance Management Framework for Implementing Cybersecurity Strategies by BCG & STC

The frequency and cost of cyberattacks is accelerating. Globally, the cost of cybercrime is estimated to have risen from $445B in 2015 to over $2.2 trillion today. The frequency and size of data br...

Cloud SecurityOct 8, 2022·3 min read

Best Cloud SaaS Governance Practices from the CSA Cloud Security Alliance

Introduction Infrastructure as Service security is almost always the focus when discussing cloud security. platforms as a service (PaaS) and infrastructure as a service (IaaS). In spite of the fact...

Cloud SecurityOct 7, 2022·6 min read

Security and Privacy Capability Maturity Model (SP-CMM) by SCF, Secure and Privacy by Design Principles Framework

The SP establishes 32 common-sense principles to guide the development and oversight of a modern security and privacy program. The SP is sourced from the Secure Controls Framework (SCF), which is a...

Cloud SecurityOct 5, 2022·9 min read

Campaigns to be Introduced to MITRE ATT&CK V12

Primary Articles [Published ](<https://medium.com/mitre-attack/introducing-attack-campaigns-6b15baa6cbb4)by Matt Malona In [ATT&CK 2022](<https://medium.com/mitre-attack/attack-2022-roadmap-cd5a1a3...

Cloud SecurityOct 3, 2022·9 min read

DevSecOps is not just a technological shift; it is also a cultural one, according to Tenable.cs Cloud Security's whitepaper, "7 Habits of Highly Effective DEVSECOPS Teams."

DecSecOps, which is typically viewed as an integrated team of development, operational, and security practitioners that can securely deliver innovation within a defined scope to market, is an ideal...

Cloud SecuritySep 20, 2022·4 min read

A CyberRisk Alliance Resource, MSSP Alert - TOP 250 MSSPs Services Providers 2022 edition

A succinct summary The Top 250 MSSPs and associated survey respondents continue to expand more quickly than the managed security market as a whole. In fact, respondents to the survey anticipate tha...

Data BreachesSep 19, 2022·5 min read

Threat actors gained access to the personal data of tens of thousands of Revolut customers as a result of a cyberattack

Over the weekend, the financial technology company Revolut was the victim of a 'highly targeted' cyberattack in which threat actors gained access to the personal data of 0.16% of its users (approxi...

Data BreachesSep 17, 2022·3 min read

$3,500 for Starbucks Cofee Data with Name, Gender, DoB, Mobile No., Email and Address

The Straits Times discovered that 330,000 Singaporean Starbucks customers' personal information had been compromised and sold on an online forum since September 10. On Friday, the coffee chain sent...

Cloud SecuritySep 17, 2022·6 min read

BARK: A PowerShell script was created to aid the BloodHound Enterprise team in locating and regularly validating abuse primitives.

BloodHound Attack Research Kit is referred to as BARK. It is a PowerShell script created to help the BloodHound Enterprise team find and keep track of abuse primitives. At the moment, BARK is conce...

Compliance & PrivacySep 17, 2022·22 min read

Beta Mobile Sub-Techniques, Structured Detections, and ICS Join the Band as ATT&CK Upgrades to Version 11

The most recent ATT&CK release is now available, and this time They have upgraded to version 11! There shouldn't be any major surprises if you've been following their roadmap, but they wanted to ta...

Cloud SecuritySep 17, 2022·4 min read

The Azure Threat Research Matrix is explained

It's typical for the assessment team to cite the MITRE ATT&CK knowledge base when conducting an offensive security assessment so that high-level stakeholders can see visually which techniques were ...

Threat IntelligenceSep 16, 2022·3 min read

Uber employees believed the alleged teen hacker attack was a joke.

The world's largest ride-hailing company, Uber, shut down a portion of its operations late on Thursday after learning that its internal systems had been compromised. According to the company, the a...

Vulnerabilities & ExploitsSep 10, 2022·5 min read

Dufflebag

A tool called [Dufflebag ](<https://github.com/bishopfox/dufflebag)developed by [dan-bishopfox Dan Petro](<https://github.com/dan-bishopfox) and [bmoar Ben Morris](<https://github.com/bmoar

Threat IntelligenceSep 9, 2022·6 min read

Portuguese NATO documents discovered for sale online

The National Security Office is still determining the extent of the damage, but EMGFA, secret military, and MDN computers are suspected of being involved in the security lapse that made it possible...

Threat IntelligenceSep 8, 2022·1 min read

A significant data breach on the streaming service Brand New Tube exposed users' names and IP addresses.

A significant security flaw has been discovered on [BrandNewTube](<https://brandnewtube.com/), a YouTube alternative that was founded in the UK. Several users who received an email that revealed thei

Cloud SecuritySep 7, 2022·9 min read

A Successful Threat-Hunting Program's Foundation

'Threat hunting is the practice of proactively searching for cyber threats that are lurking undetected in a network. Cyber threat hunting digs deep to find malicious actors in your environment tha

Cloud SecuritySep 6, 2022·3 min read

Feds and npm Give advice on supply chain security to prevent another SolarWinds incident

Faster development times, innovation, and a thriving open-source community have all been made possible by the ability to use another developer's project as a dependency. With many JavaScript projects

Threat IntelligenceSep 5, 2022·3 min read

Change your Tiktok password immediately in case of a massive data leak.

There's a post from 12 hours ago on a well-known hacking forum making some pretty significant claims, with the disclaimer that everything is 'alleged' at this point: 'We don't know why it's there o...

Threat IntelligenceSep 4, 2022·4 min read

NATO Examines Data Breach from Missile Vendor on the Dark Web

One set of documents purportedly belonging to an EU defense supplier includes information on the weapons Ukraine used to fight Russia. According to a report in the media, NATO is looking into the l...

Threat IntelligenceFeb 25, 2022·3 min read

DRDO and IIT Delhi scientists demonstrate Quantum Key Distribution (QKD) between two cities 100 kilometres apart

For the first time in the country, a team of scientists from the Defence Research and Development Organisation (DRDO) and the Indian Institute of Technology (IIT) Delhi successfully demonstrated a ...

Threat IntelligenceFeb 24, 2022·4 min read

Indian Organizations also targetted by Bvp47 backdoor of US NSA Equation Group

Banaras Hindu University, India Education Network, Eureka Technology Partners, Indian Academy of Sciences, Indian Institute of Tropical Meteorology, Council of Scientific & Industrial Research (CSIR)

Threat IntelligenceFeb 23, 2022·20 min read

Free Cybersecurity Services And Tools Released by CISA

CISA has collected a list of free cybersecurity tools and services to help companies advance their security capabilities as part of our ongoing objective to minimise cybersecurity risk among U.S. c...

Malware & RansomwareFeb 23, 2022·3 min read

Phishing and malware by numbers in the Threat Report Portugal Q3 2021.

Segurança-Informática developed and maintains the Portuguese Abuse Open Feed 0xSI f33d, an open sharing database with the potential to collect indicators from numerous sources. This feed is provide...

Threat IntelligenceFeb 22, 2022·5 min read

Cybersecurity Risks of Russia-Ukraine Conflict Escalation

DDoS attacks on Ukrainian groups were promptly traced to Russian intelligence by the UK and US governments last week. The intrusions on February 15 and 16 were 'very certain' the work of the Russia...

Threat IntelligenceJan 28, 2022·2 min read

Payout for Zero-Click Outlook Zero-Days has been increased to $400,000 by Zerodium.

It was announced on the same day that Trustwave SpiderLabs revealed a new approach to get around Outlook security and send malicious links to victims. was reported by [threatpost](<https://threatpo...

Threat IntelligenceJan 18, 2022·5 min read

Joint action by 10 countries and Europol taken down VPNLabs secure communication tool favored by cybercriminals

Joint action by 10 countries and Europol taken down VPNLabs secure communication tool favored by cybercriminals This week, law enforcement officials targeted VPNLab.net's users and infrastructure i...

Threat IntelligenceJan 18, 2022·4 min read

Russia Arrests members of "REvil" hacking group at U.S. request - FSB

In Russia, the cities of Moscow, St. Petersburg, Moscow, Leningrad, and Lipetsk, the Russian Federation's Federal Security Service, in collaboration with the Ministry of Internal Affairs' Investiga...

Vulnerabilities & ExploitsJan 16, 2022·9 min read

MITRE ATT&CK® Released Updates in Oct 2021 With Additional Techniques and Structuring

MITRE ATT&CK® is a globally accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of ...

Threat IntelligenceJan 12, 2022·4 min read

Russian Hackers Infiltrate Exams of Indian Navy And Air Force

The Delhi Police’s has busted attempts of Russian hackers to infiltrate the Indian Navy and Air Force exams through the dark web. The Intelligence Department of Delhi Police were the ones who brought

AI/ML SecurityJan 9, 2022·2 min read

Alexa AI Attempts to murder a child

Amazon Alexa, also known simply as Alexa, is a virtual assistant technology largely based on a Polish speech synthesizer named Ivona, bought by Amazon in 2013. It was first used in the Amazon Echo ...

Threat IntelligenceJan 7, 2022·2 min read

France gonna Earn 210 Million Euro from fine on Cookies of facebook and google

Cookie Consent [Dark Pattern](<https://www.darkpatterns.org/types-of-dark-pattern): Privacy Zuckering In a NutShell 'Following investigations, the CNIL noted that the websites facebook.com, google.f

Cloud SecurityJan 4, 2022·2 min read

Gartner EDRs are not perfect, fail against common attacks

Advanced Persistent threats have been a pain for blue teams for a very long time, and one of the key tool in the arsenal is Endpoint Detection and Response tools since the recent past, however, the...

Vulnerabilities & ExploitsSep 7, 2021·1 min read

Useful Pentesting Resources

A curated list of useful penetration testing resources, tools, and references for security professionals.

Vulnerabilities & ExploitsJul 4, 2021·10 min read

MITRE ATT&CK® Released Updates in April 2021 With Additional Techniques and Structuring

Cloud SecurityJul 4, 2021·2 min read

NSA Released D3FEND a framework for cybersecurity professionals to tailor defenses

Recently a Framework was Released by NSA named D3FEND which is based on and Complementary to MITRE ATT&CK Framework. It gave a Technical Knowledge base to create Defensive Countermeasure against Co...

Threat IntelligenceJul 3, 2021·3 min read

Bharat Ranked in Tier 3 of IISS Cyber Capabilities and National Power: A Net Assessment

As a result of a Study conducted by IISS Researchers in the last two years, Bharat was ranked in Tier 3, it is to be noted that the US is the only nation in Tier one. Instead of Going the traditional

Vulnerabilities & ExploitsJul 3, 2021·2 min read

Penetration testing Attack Infrastructure

Attack Infra Penetration testing Planning Fill the planning gap Attack Infrastructure/C2 Recon Social Engineering Weaponization Initial Access/foothold Network Pro...

Threat IntelligenceMay 21, 2020·1 min read

Next-gen missile data, Hacked in Japan report says

The Japanese Defense Ministry is investigating a possible leak of details of a new state-of-the-art missile in a large-scale cyberattack on Mitsubishi Electric Corp, the Asahi Shimbun newspaper rep...

Threat IntelligenceMay 20, 2020·5 min read

BIAS: Bluetooth Impersonation AttackS

[Daniele Antonioli](<https://francozappa.github.io/about-bias/authors/francozappa/) (Postdoc at the EPFL Cyber-Physical Systems Security, Network Security, Wireless Security, Embedded Systems Securit

Vulnerabilities & ExploitsMay 18, 2020·6 min read

Huawei dev team, buggy HKSP patch with backdoor and Linux Foundation

Last week the Huawei development team submitted a patch to the Linux Foundation with a ‘trivial vulnerability.’ When the vulnerability was discovered, Huawei denied its involvement in the patch and...

Published Database (104)

71% of SOCs Report AI Is Underdelivering. The Second Wave Must Fix It.

Attackers Weaponize AI Chatbot Trust to Hijack GPUs and Mine Crypto

Gulf Executives Face Surge in WhatsApp Impersonation Attacks

Acer addresses critical zero-day vulnerabilities in Wave 7 routers

B&R PPT30 Operating System

Can Someone Please ELI5 - "YellowKey" (CVE-2026-45585) to me? (an IT admin that survived the Great Global CrowdStrike Outage of 24)

CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog

Cisco Unified Communications Manager Vulnerability Exposed Along With PoC Exploit Code

Hitachi Energy ITT600 Explorer

ICANN sets the October 2026 DNS trust anchor rollover

Offroad Emerges From Stealth With $7 Million to Tackle Enterprise Identity Risk

Code is cheap

Google Patches Android Zero-Day CVE-2025-48595 Exploited in Targeted Attacks

Hackers Used Meta's AI Support Bot to Seize Instagram Accounts

Two-year old Oracle WebLogic Server vulnerability is being exploited

U.S. CISA adds Android and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

Google fixes one actively exploited Android zero-day, 124 flaws

Infected Red Hat npm packages expose developer credentials

Critical Windows Netlogon RCE flaw now exploited in attacks

CVE-2026-0826: Critical unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (FIXED)

Carnival Data Breach Impacts Nearly 6 Million Customers

Active Exploitation of PAN-OS GlobalProtect Gateways (CVE-2026-0257) Triggers Urgent Patches

7-Eleven Data Breach Exposes Personal Information of 185,000 People

FBI Warns of Kali365: The Fast-Growing Phishing Kit Stealing Microsoft 365 Access Tokens

Ghost CMS Flaw Abused to Push ClickFix Attacks on Hundreds of Sites

Critical VMware Zero-Day Vulnerability Under Active Exploitation

Ransomware Attack Disrupts Major Healthcare Provider Operations

New EU AI Security Regulations: What Organizations Need to Know

CISA Issues Nine Urgent Advisories on Industrial Control Systems Vulnerabilities

Critical Google Chrome Zero-Day CVE-2025-10585: What You Need to Know

Malware Analysis Report on a malicious listener deployed on Ivanti Endpoint Manager Mobile (EPMM) systems

MSSP Alert Top 250 for 2024: A Deep Dive into the State of Cybersecurity

Pakistan-Linked APT36 Exploits "Pahalgam Terror Attack" Theme in Multi-Pronged Cyber Espionage Campaign Against India

Unpacking CVE-2025-29927: A Deep Dive into the Next.js Path Traversal Vulnerability

MITRE ATT&amp;CKcon 5.0: Elevating Cybersecurity Knowledge

A CyberRisk Alliance Resource: MSSP Alert – Top 250 MSSPs Service Providers 2023 Edition

Securing the Clouds: The Top 10 CSPM Tools Shaping Cloud Security

MITRE ATT&CK version 14

Optimizing Security with OPSWAT Solutions

Leading Vulnerability Scanners: Benefits and Use Cases

Centralized Log Management & SIEM Solutions: Benefits & Top Picks

DevsecOps: Advantages of Multi-Level Application Security Testing

Optimizing IT Operations with Top CMDB Solutions

MITRE ATT&amp;CK version 13

Leading DLP Solutions: Maximizing Data Protection

Maximizing Efficiency: Top MDM Solutions & Benefits

Exploring Top RASP Solutions for Secure Web Applications

Maximizing Online Security: Top DNS Filtering Solutions

CISA Updates Best Practices for MITRE ATT&CK® Mapping

ATT&CK v12 is now accessible! Revisions – October 2022

Google Announcing GUAC, a great pairing with SLSA (and SBOM)!

Canarytokens. org - Rapid, Free, Mass Detection

Critical Fortinet auth bypass bug has an exploit available; apply the patch now

Micro Emulation Plans by MITRE-Engenuity

Organizations in Poland and Ukraine are affected by the new "Prestige" ransomware.

Cloud Web Application and API Protection Magic Quadrant

Serverless Top security best practices

Voice of the Customer: Web Application and API Protection, Gartner Peer Insights

MITRE ATT&CK® Released Updates in Apr 2022 With Additional Techniques and Structuring

OWASP Threat Dragon : open-source threat modeling tool from OWASP

The Microsoft Threat Modeling Tool (TMT)

IriusRisk Threat Modeling for Security and Development Teams

Threat Modeling: Choosing the Right Method for Your Business

Kenna: RISK-BASED VULNERABILITY MANAGEMENT

A Holistic Performance Management Framework for Implementing Cybersecurity Strategies by BCG & STC

Best Cloud SaaS Governance Practices from the CSA Cloud Security Alliance

Security and Privacy Capability Maturity Model (SP-CMM) by SCF, Secure and Privacy by Design Principles Framework

Campaigns to be Introduced to MITRE ATT&CK V12

DevSecOps is not just a technological shift; it is also a cultural one, according to Tenable.cs Cloud Security's whitepaper, "7 Habits of Highly Effective DEVSECOPS Teams."

A CyberRisk Alliance Resource, MSSP Alert - TOP 250 MSSPs Services Providers 2022 edition

Threat actors gained access to the personal data of tens of thousands of Revolut customers as a result of a cyberattack

$3,500 for Starbucks Cofee Data with Name, Gender, DoB, Mobile No., Email and Address

BARK: A PowerShell script was created to aid the BloodHound Enterprise team in locating and regularly validating abuse primitives.

Beta Mobile Sub-Techniques, Structured Detections, and ICS Join the Band as ATT&CK Upgrades to Version 11

The Azure Threat Research Matrix is explained

Uber employees believed the alleged teen hacker attack was a joke.

Dufflebag

Portuguese NATO documents discovered for sale online

A significant data breach on the streaming service Brand New Tube exposed users' names and IP addresses.

MITRE ATT&CKcon 5.0: Elevating Cybersecurity Knowledge

MITRE ATT&CK version 13