SecurityXP delivers the latest cybersecurity news, CVE alerts, data breach reports, threat intelligence, and hands-on infosec tools for security professionals and IT teams.https://securityxp.com/enhttps://securityxp.com/articles/01_dell_bios_flaw_lets_attackers_recover_admin_passwords_from_s/https://securityxp.com/articles/01_dell_bios_flaw_lets_attackers_recover_admin_passwords_from_s/Tracked as CVE-2026-40639 and addressed in Dell Security Advisory DSA-2026-197, the issue affects certain Dell client platforms that use the proprietary DVAR...Sat, 11 Jul 2026 16:59:40 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Dell_BIOS_Flaw_Lets_Attackers_Recover_Admin_Passwords_From_S.png" alt="Dell BIOS Flaw Lets Attackers Recover Admin Passwords From SPI Flash in Milliseconds Cybersecurity" style="max-width: 100%; border-radius: 8px;" /></p> <p>Tracked as CVE-2026-40639 and addressed in Dell Security Advisory DSA-2026-197, the issue affects certain Dell client platforms that use the proprietary DVAR...</p> TechnologySecurityXPhttps://securityxp.com/articles/02_weekly_metasploit_update__exploits_for_flowiseai_csv_agent_a/https://securityxp.com/articles/02_weekly_metasploit_update__exploits_for_flowiseai_csv_agent_a/Flowise CSV Agent Prompt Injection RCE Authors: Takahiro Yokoyama and zdi-disclosures Type: Exploit Pull request: 21407 contributed by Takahiro-Yoko Path...Sat, 11 Jul 2026 16:59:40 GMT <p><img src="https://securityxp.com/uploads/heroes/02_Weekly_Metasploit_Update__Exploits_for_FlowiseAI_CSV_Agent_a.png" alt="Weekly Metasploit Update: Exploits for FlowiseAI CSV Agent and MacOS Package Kit Cybersecurity" style="max-width: 100%; border-radius: 8px;" /></p> <p>Flowise CSV Agent Prompt Injection RCE Authors: Takahiro Yokoyama and zdi-disclosures Type: Exploit Pull request: 21407 contributed by Takahiro-Yoko Path...</p> TechnologySecurityXPhttps://securityxp.com/articles/03_critical_vulnerability_in_red_hat_openshift_ai__rhoai/https://securityxp.com/articles/03_critical_vulnerability_in_red_hat_openshift_ai__rhoai/Skip to navigation Skip to main content Utilities Subscriptions Downloads Red Hat Console Get Support Subscriptions Downloads Red Hat Console Get Support...Sat, 11 Jul 2026 16:59:40 GMT <p><img src="https://securityxp.com/uploads/heroes/03_Critical_vulnerability_in_Red_Hat_OpenShift_AI__RHOAI.png" alt="Critical vulnerability in Red Hat OpenShift AI (RHOAI) Cybersecurity (CVE-2026-15378)" style="max-width: 100%; border-radius: 8px;" /></p> <p>Skip to navigation Skip to main content Utilities Subscriptions Downloads Red Hat Console Get Support Subscriptions Downloads Red Hat Console Get Support...</p> TechnologySecurityXPhttps://securityxp.com/articles/01_wp-shellstorm_exposed__hackers_backdoored_thousands_of_wordp/https://securityxp.com/articles/01_wp-shellstorm_exposed__hackers_backdoored_thousands_of_wordp/Treat the Joomla JCE flaw (CVE-2026-48907, fixed in 2.9.99.5) as urgent too, since it is a maximum-severity and on CISA's actively-exploited list, even...Fri, 10 Jul 2026 21:19:38 GMT <p><img src="https://securityxp.com/uploads/heroes/01_WP-SHELLSTORM_Exposed__Hackers_Backdoored_Thousands_of_WordP.png" alt="WP-SHELLSTORM Exposed: Hackers Backdoored Thousands of WordPress Websites Cybersecurity" style="max-width: 100%; border-radius: 8px;" /></p> <p>Treat the Joomla JCE flaw (CVE-2026-48907, fixed in 2.9.99.5) as urgent too, since it is a maximum-severity and on CISA's actively-exploited list, even...</p> TechnologySecurityXPhttps://securityxp.com/articles/03_progress_urges_sharefile_admins_to_shut_down_servers_over_cr/https://securityxp.com/articles/03_progress_urges_sharefile_admins_to_shut_down_servers_over_cr/In April 2026, watchTowr Labs disclosed two chainable vulnerabilities in Storage Zone Controller: CVE-2026-2699, an authentication bypass with a CVSS score...Fri, 10 Jul 2026 21:19:38 GMT <p><img src="https://securityxp.com/uploads/heroes/03_Progress_Urges_ShareFile_Admins_to_Shut_Down_Servers_Over_Cr.png" alt="Progress Urges ShareFile Admins to Shut Down Servers Over Credible Security Threat Cybersecurity" style="max-width: 100%; border-radius: 8px;" /></p> <p>In April 2026, watchTowr Labs disclosed two chainable vulnerabilities in Storage Zone Controller: CVE-2026-2699, an authentication bypass with a CVSS score...</p> TechnologySecurityXPhttps://securityxp.com/articles/01_hitachi_energy_e-mesh_ems/https://securityxp.com/articles/01_hitachi_energy_e-mesh_ems/The following versions of Hitachi Energy e-mesh EMS are affected: - Hitachi Energy e-mesh EMS 4.1.6, 4.4.2, 4.7.0 Background - Critical Infrastructure...Tue, 07 Jul 2026 18:00:07 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Hitachi_Energy_e-mesh_EMS.png" alt="Hitachi Energy e-mesh EMS Vulnerability (CVE-2026-42945)" style="max-width: 100%; border-radius: 8px;" /></p> <p>The following versions of Hitachi Energy e-mesh EMS are affected: - Hitachi Energy e-mesh EMS 4.1.6, 4.4.2, 4.7.0 Background - Critical Infrastructure...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/02_critical_gitea_flaw_under_active_exploitation__researchers_w/https://securityxp.com/articles/02_critical_gitea_flaw_under_active_exploitation__researchers_w/Specific to Gitea’s official Docker images, the critical-severity security defect is tracked as CVE-2026-20896 (CVSS score of 9.8) and can be exploited with...Tue, 07 Jul 2026 18:00:07 GMT <p><img src="https://securityxp.com/uploads/heroes/02_Critical_Gitea_Flaw_Under_Active_Exploitation__Researchers_W.png" alt="Critical Gitea Flaw Under Active Exploitation, Researchers Warn Vulnerability (CVE-2026-20896)" style="max-width: 100%; border-radius: 8px;" /></p> <p>Specific to Gitea’s official Docker images, the critical-severity security defect is tracked as CVE-2026-20896 (CVSS score of 9.8) and can be exploited with...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/03_cloudflare_proudly_joins_the_uk_government_s_cyber_resilienc/https://securityxp.com/articles/03_cloudflare_proudly_joins_the_uk_government_s_cyber_resilienc/This trend is consistent with broader data from the UK Cyber Security Breaches Survey, which revealed that 43% of surveyed British businesses and 28% of...Tue, 07 Jul 2026 18:00:07 GMT <p><img src="https://securityxp.com/uploads/heroes/03_Cloudflare_proudly_joins_the_UK_government_s_Cyber_Resilienc.png" alt="Cloudflare proudly joins the UK government's Cyber Resilience Pledge Cybercrime" style="max-width: 100%; border-radius: 8px;" /></p> <p>This trend is consistent with broader data from the UK Cyber Security Breaches Survey, which revealed that 43% of surveyed British businesses and 28% of...</p> CybercrimeSecurityXPhttps://securityxp.com/articles/02_socradar_links_fortibleed_campaign_targeting_manufacturers_t/https://securityxp.com/articles/02_socradar_links_fortibleed_campaign_targeting_manufacturers_t/The hacker likely already found and exploited a zero-day vulnerability in Nextcloud, an open-source content collaboration platform. They also built ‘PENTEST...Tue, 07 Jul 2026 16:16:13 GMT <p><img src="https://securityxp.com/uploads/heroes/02_SOCRadar_links_FortiBleed_campaign_targeting_manufacturers_t.png" alt="SOCRadar links FortiBleed campaign targeting manufacturers to Lynx and INC ransomware attacks" style="max-width: 100%; border-radius: 8px;" /></p> <p>The hacker likely already found and exploited a zero-day vulnerability in Nextcloud, an open-source content collaboration platform. They also built ‘PENTEST...</p> Threat IntelligenceSecurityXPhttps://securityxp.com/articles/04_abb_launches_fim_3_5_with_vendor-neutral_automated_firmware/https://securityxp.com/articles/04_abb_launches_fim_3_5_with_vendor-neutral_automated_firmware/ABB announced launch of ABB Ability Field Information Manager (FIM) 3.5, a vendor-neutral platform for automated field device firmware updates. FIM 3.5...Tue, 07 Jul 2026 16:16:13 GMT <p><img src="https://securityxp.com/uploads/heroes/04_ABB_launches_FIM_3_5_with_vendor-neutral_automated_firmware.png" alt="ABB launches FIM 3.5 with vendor-neutral automated firmware updates for industrial field devices" style="max-width: 100%; border-radius: 8px;" /></p> <p>ABB announced launch of ABB Ability Field Information Manager (FIM) 3.5, a vendor-neutral platform for automated field device firmware updates. FIM 3.5...</p> IoT SecuritySecurityXPhttps://securityxp.com/articles/02_cydome_reports_fortibleed_credential_leak_poses_elevated_ris/https://securityxp.com/articles/02_cydome_reports_fortibleed_credential_leak_poses_elevated_ris/On a vessel without clean IT and OT separation, that same path can reach bridge systems, cargo management, and VSAT links.” Fortinet officially characterizes...Tue, 07 Jul 2026 14:19:56 GMT <p><img src="https://securityxp.com/uploads/heroes/02_Cydome_reports_FortiBleed_credential_leak_poses_elevated_ris.png" alt="Cydome reports FortiBleed credential leak poses elevated risks to maritime and energy critical infrastructure" style="max-width: 100%; border-radius: 8px;" /></p> <p>On a vessel without clean IT and OT separation, that same path can reach bridge systems, cargo management, and VSAT links.” Fortinet officially characterizes...</p> ICS/OT SecuritySecurityXPhttps://securityxp.com/articles/03_beyond_safety_and_security__why_automotive_open_source_deman/https://securityxp.com/articles/03_beyond_safety_and_security__why_automotive_open_source_deman/Bridging the gap between the upstream velocity of Linux and the downstream rigor of automotive standards requires more than just a repository: it requires a...Tue, 07 Jul 2026 14:19:56 GMT <p><img src="https://securityxp.com/uploads/heroes/03_Beyond_safety_and_security__Why_automotive_open_source_deman.png" alt="Beyond safety and security: Why automotive open source demands dependability Compliance" style="max-width: 100%; border-radius: 8px;" /></p> <p>Bridging the gap between the upstream velocity of Linux and the downstream rigor of automotive standards requires more than just a repository: it requires a...</p> Compliance & PrivacySecurityXPhttps://securityxp.com/articles/01_critical_adobe_coldfusion_vulnerability_exploited_in_attacks/https://securityxp.com/articles/01_critical_adobe_coldfusion_vulnerability_exploited_in_attacks/However, according to the vulnerability intelligence platform KEVIntel, hackers began exploiting CVE-2026-48282 within two hours of its public disclosure...Tue, 07 Jul 2026 14:04:50 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Critical_Adobe_ColdFusion_Vulnerability_Exploited_in_Attacks.png" alt="Critical Adobe ColdFusion Vulnerability Exploited in Attacks (CVE-2026-48282)" style="max-width: 100%; border-radius: 8px;" /></p> <p>However, according to the vulnerability intelligence platform KEVIntel, hackers began exploiting CVE-2026-48282 within two hours of its public disclosure...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/02_openai_codex_desktop_app_for_macos_vulnerability_allows_atta/https://securityxp.com/articles/02_openai_codex_desktop_app_for_macos_vulnerability_allows_atta/As AI-assisted development tools continue to gain adoption, vulnerabilities like CVE-2026-14898 underscore the need for secure design practices that account...Tue, 07 Jul 2026 14:04:50 GMT <p><img src="https://securityxp.com/uploads/heroes/02_OpenAI_Codex_Desktop_App_for_macOS_Vulnerability_Allows_Atta.png" alt="OpenAI Codex Desktop App for macOS Vulnerability Allows Attackers to Inject Indirect Prompt" style="max-width: 100%; border-radius: 8px;" /></p> <p>As AI-assisted development tools continue to gain adoption, vulnerabilities like CVE-2026-14898 underscore the need for secure design practices that account...</p> AI/ML SecuritySecurityXPhttps://securityxp.com/articles/03_threat_modeling_generative_ai__what_11_658_incidents_and_the/https://securityxp.com/articles/03_threat_modeling_generative_ai__what_11_658_incidents_and_the/Instead, improper output handling (42%) and misinformation/misuse (35%) represent the vast majority of actual incidents.Sun, 05 Jul 2026 18:32:10 GMT <p><img src="https://securityxp.com/uploads/heroes/03_Threat_Modeling_Generative_AI__What_11_658_Incidents_and_the.png" alt="Threat Modeling Generative AI: What 11,658 Incidents Reveal About Real-World Risk" style="max-width: 100%; border-radius: 8px;" /></p> <p>Instead, improper output handling (42%) and misinformation/misuse (35%) represent the vast majority of actual incidents.</p> AI/ML SecuritySecurityXPhttps://securityxp.com/articles/04_bingo-ai_3_6_3/https://securityxp.com/articles/04_bingo-ai_3_6_3/Blind Signing / EIP-7730 (Bybit $1.5B Attack Vector) The Bybit $1.5B hack (Feb 2025) exploited a Safe multisig blind signing flaw: - Attackers changed...Sat, 04 Jul 2026 16:02:42 GMT <p><img src="https://securityxp.com/uploads/heroes/04_bingo-ai_3_6_3.png" alt="bingo-ai 3.6.3 Vulnerability" style="max-width: 100%; border-radius: 8px;" /></p> <p>Blind Signing / EIP-7730 (Bybit $1.5B Attack Vector) The Bybit $1.5B hack (Feb 2025) exploited a Safe multisig blind signing flaw: - Attackers changed...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/ousaban-banking-trojan-targets-iberian-bank-users-with-fake-pdf-lures-malware/https://securityxp.com/articles/ousaban-banking-trojan-targets-iberian-bank-users-with-fake-pdf-lures-malware/This malware employs sophisticated techniques to evade detection and steal banking credentials, The Hacker News reports.The Ousaban campaign begins with a phishing PDF disguised as a corrupted file, p...Thu, 02 Jul 2026 00:00:00 GMT <p><img src="https://securityxp.com/og-cards/ousaban-banking-trojan-targets-iberian-bank-users-with-fake-pdf-lures-malware.png" alt="Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures Malware" style="max-width: 100%; border-radius: 8px;" /></p> <p>This malware employs sophisticated techniques to evade detection and steal banking credentials, The Hacker News reports.The Ousaban campaign begins with a phishing PDF disguised as a corrupted file, p...</p> TechnologySecurityXP Intelligence Deskhttps://securityxp.com/articles/secure-amazon-container-workloads-using-container-attribute-based-rules-in-aws/https://securityxp.com/articles/secure-amazon-container-workloads-using-container-attribute-based-rules-in-aws/If you run AI and machine learning (ML) workloads on Amazon EKS, such as model inference, RAG pipelines, or JupyterHub, your containerized workloads require the same firewall protections you enforce f...Thu, 02 Jul 2026 00:00:00 GMT <p><img src="https://securityxp.com/og-cards/secure-amazon-container-workloads-using-container-attribute-based-rules-in-aws.png" alt="Secure Amazon container workloads using container attribute-based rules in AWS Network Firewall" style="max-width: 100%; border-radius: 8px;" /></p> <p>If you run AI and machine learning (ML) workloads on Amazon EKS, such as model inference, RAG pipelines, or JupyterHub, your containerized workloads require the same firewall protections you enforce f...</p> TechnologySecurityXP Intelligence Deskhttps://securityxp.com/articles/01_attackers_exploit_simplehelp_cve-2026-48558_to_deploy_taskwe/https://securityxp.com/articles/01_attackers_exploit_simplehelp_cve-2026-48558_to_deploy_taskwe/"Credentials accessible from a developer or administrator workstation may provide entry into production infrastructure, build pipelines, source code...Wed, 01 Jul 2026 15:08:10 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Attackers_Exploit_SimpleHelp_CVE-2026-48558_to_Deploy_TaskWe.png" alt="Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer Vulnerability" style="max-width: 100%; border-radius: 8px;" /></p> <p>"Credentials accessible from a developer or administrator workstation may provide entry into production infrastructure, build pipelines, source code...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/01_cisco_unified_cm_flaw_cve-2026-20230_actively_exploited_in_t/https://securityxp.com/articles/01_cisco_unified_cm_flaw_cve-2026-20230_actively_exploited_in_t/Cisco Unified Communications Manager has a serious vulnerability, tracked as CVE-2026-20230 (CVSS score of 8.6), that attackers are already exploiting. The...Wed, 24 Jun 2026 14:04:31 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Cisco_Unified_CM_Flaw_CVE-2026-20230_Actively_Exploited_in_t.png" alt="Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild Vulnerability" style="max-width: 100%; border-radius: 8px;" /></p> <p>Cisco Unified Communications Manager has a serious vulnerability, tracked as CVE-2026-20230 (CVSS score of 8.6), that attackers are already exploiting. The...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/04_from_platform_to_program__how_to_ensure_your_cloud_security/https://securityxp.com/articles/04_from_platform_to_program__how_to_ensure_your_cloud_security/Orca’s 2026 State of Application Security Report found that 77% of organizations retain high or critical container vulnerabilities for more than 90 days, a...Wed, 24 Jun 2026 14:04:31 GMT <p><img src="https://securityxp.com/uploads/heroes/04_From_Platform_to_Program__How_to_Ensure_Your_Cloud_Security.png" alt="From Platform to Program: How to Ensure Your Cloud Security Solution Delivers" style="max-width: 100%; border-radius: 8px;" /></p> <p>Orca’s 2026 State of Application Security Report found that 77% of organizations retain high or critical container vulnerabilities for more than 90 days, a...</p> Cloud SecuritySecurityXPhttps://securityxp.com/articles/01_scattered_spider_hackers_plead_guilty_on_day_1_of_trial/https://securityxp.com/articles/01_scattered_spider_hackers_plead_guilty_on_day_1_of_trial/According to the NCA, the cyberattack at TfL forced all 28,000 employees to visit their local offices to reset their passwords and caused £29 million...Tue, 23 Jun 2026 17:00:25 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Scattered_Spider_Hackers_Plead_Guilty_on_Day_1_of_Trial.png" alt="Scattered Spider Hackers Plead Guilty on Day 1 of Trial Cybercrime" style="max-width: 100%; border-radius: 8px;" /></p> <p>According to the NCA, the cyberattack at TfL forced all 28,000 employees to visit their local offices to reset their passwords and caused £29 million...</p> CybercrimeSecurityXPhttps://securityxp.com/articles/04_aws_warns_outbound_traffic_blind_spots_can_enable_cloud_data/https://securityxp.com/articles/04_aws_warns_outbound_traffic_blind_spots_can_enable_cloud_data/The AWS report shared with Cyber Security News (CSN) points to cases where unpatched vulnerabilities, such as CVE-2025-55182 (React2Shell), allowed attackers...Tue, 23 Jun 2026 17:00:25 GMT <p><img src="https://securityxp.com/uploads/heroes/04_AWS_Warns_Outbound_Traffic_Blind_Spots_Can_Enable_Cloud_Data.png" alt="AWS Warns Outbound Traffic Blind Spots Can Enable Cloud Data Exfiltration Cloud Security" style="max-width: 100%; border-radius: 8px;" /></p> <p>The AWS report shared with Cyber Security News (CSN) points to cases where unpatched vulnerabilities, such as CVE-2025-55182 (React2Shell), allowed attackers...</p> Cloud SecuritySecurityXPhttps://securityxp.com/articles/01_texas_parks___wildlife_data_breach_affects_3_million_individ/https://securityxp.com/articles/01_texas_parks___wildlife_data_breach_affects_3_million_individ/Related: Data Breaches at Healthcare Organizations in Illinois and Texas Affect 600,000 Related: 377,000 Impacted by Data Breach at Texas Gas Station Firm...Mon, 22 Jun 2026 15:23:03 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Texas_Parks___Wildlife_Data_Breach_Affects_3_Million_Individ.png" alt="Texas Parks & Wildlife Data Breach Affects 3 Million Individuals" style="max-width: 100%; border-radius: 8px;" /></p> <p>Related: Data Breaches at Healthcare Organizations in Illinois and Texas Affect 600,000 Related: 377,000 Impacted by Data Breach at Texas Gas Station Firm...</p> Data BreachesSecurityXPhttps://securityxp.com/articles/03_on-premises_api_security_on_kubernetes__what_it_actually_loo/https://securityxp.com/articles/03_on-premises_api_security_on_kubernetes__what_it_actually_loo/PCI DSS 4.0.1 now requires continuous API security testing and maintained API inventories. (These PCI DSS 4.0.1 requirements became mandatory on March 31...Mon, 22 Jun 2026 15:23:03 GMT <p><img src="https://securityxp.com/uploads/heroes/03_On-Premises_API_Security_on_Kubernetes__What_It_Actually_Loo.png" alt="On-Premises API Security on Kubernetes: What It Actually Looks Like in Practice App Security" style="max-width: 100%; border-radius: 8px;" /></p> <p>PCI DSS 4.0.1 now requires continuous API security testing and maintained API inventories. (These PCI DSS 4.0.1 requirements became mandatory on March 31...</p> Application SecuritySecurityXPhttps://securityxp.com/articles/04_sunil_varkey_joins_hexaware_technologies_as_evp___ciso/https://securityxp.com/articles/04_sunil_varkey_joins_hexaware_technologies_as_evp___ciso/His responsibilities align with Hexaware Technologies’ broader technology and growth objectives as the company continues to support large-scale digital...Mon, 22 Jun 2026 15:23:03 GMT <p><img src="https://securityxp.com/uploads/heroes/04_Sunil_Varkey_Joins_Hexaware_Technologies_as_EVP___CISO.png" alt="Sunil Varkey Joins Hexaware Technologies as EVP & CISO Cybersecurity Careers" style="max-width: 100%; border-radius: 8px;" /></p> <p>His responsibilities align with Hexaware Technologies’ broader technology and growth objectives as the company continues to support large-scale digital...</p> Cybersecurity Careers / WorkforceSecurityXPhttps://securityxp.com/articles/04_week_in_review__74k_fortinet_firewall_credentials_stolen__sp/https://securityxp.com/articles/04_week_in_review__74k_fortinet_firewall_credentials_stolen__sp/Microsoft working on patch for RoguePlanet Defender zero-day (CVE-2026-50656) Microsoft has acknowledged the local elevation of privilege issue in Microsoft...Sun, 21 Jun 2026 08:49:03 GMT <p><img src="https://securityxp.com/uploads/heroes/04_Week_in_review__74k_Fortinet_firewall_credentials_stolen__Sp.png" alt="Week in review: 74k Fortinet firewall credentials stolen, Splunk Enterprise RCE under active attack" style="max-width: 100%; border-radius: 8px;" /></p> <p>Microsoft working on patch for RoguePlanet Defender zero-day (CVE-2026-50656) Microsoft has acknowledged the local elevation of privilege issue in Microsoft...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/05_gentlekiller_ransomware_abuses_vulnerable_drivers_to_disable/https://securityxp.com/articles/05_gentlekiller_ransomware_abuses_vulnerable_drivers_to_disable/This rapid adoption distinguishes Gentlemen from most other RaaS operators, who typically wait weeks or months before adapting publicly released exploits...Sun, 21 Jun 2026 08:49:03 GMT <p><img src="https://securityxp.com/uploads/heroes/05_GentleKiller_Ransomware_Abuses_Vulnerable_Drivers_to_Disable.png" alt="GentleKiller Ransomware Abuses Vulnerable Drivers to Disable 400+ EDR Security Processes Malware" style="max-width: 100%; border-radius: 8px;" /></p> <p>This rapid adoption distinguishes Gentlemen from most other RaaS operators, who typically wait weeks or months before adapting publicly released exploits...</p> Malware & RansomwareSecurityXPhttps://securityxp.com/articles/06_nancy_guthrie_case_reframed_by_crypto_firm_s__wrench_attack/https://securityxp.com/articles/06_nancy_guthrie_case_reframed_by_crypto_firm_s__wrench_attack/In it, CertiK described Nancy Guthrie's kidnapping as part of a "$6 million bitcoin ransom demand" and tied it to what the company called "the documented...Sun, 21 Jun 2026 08:49:03 GMT <p><img src="https://securityxp.com/uploads/heroes/06_Nancy_Guthrie_Case_Reframed_by_Crypto_Firm_s__Wrench_Attack.png" alt="Nancy Guthrie Case Reframed by Crypto Firm's "Wrench Attack" Label as Police Confirm Motive Pending" style="max-width: 100%; border-radius: 8px;" /></p> <p>In it, CertiK described Nancy Guthrie's kidnapping as part of a "$6 million bitcoin ransom demand" and tied it to what the company called "the documented...</p> CybercrimeSecurityXPhttps://securityxp.com/articles/07_virus_vs_worm__why_the_propagation_difference_actually_matte/https://securityxp.com/articles/07_virus_vs_worm__why_the_propagation_difference_actually_matte/But no detection tool replaces patching: the vulnerability that WannaCry used had a patch available for eight weeks before the attack. In 1988, the Morris...Sun, 21 Jun 2026 08:49:03 GMT <p><img src="https://securityxp.com/uploads/heroes/07_Virus_vs_Worm__Why_the_Propagation_Difference_Actually_Matte.png" alt="Virus vs Worm: Why the Propagation Difference Actually Matters Malware" style="max-width: 100%; border-radius: 8px;" /></p> <p>But no detection tool replaces patching: the vulnerability that WannaCry used had a patch available for eight weeks before the attack. In 1988, the Morris...</p> Malware & RansomwareSecurityXPhttps://securityxp.com/articles/01_vulnerability_response__built_for_humans__outpaced_by_machin/https://securityxp.com/articles/01_vulnerability_response__built_for_humans__outpaced_by_machin/Frontier models now discover and chain vulnerabilities faster than human analysts can confirm them, and the gap between finding and fixing is shrinking in...Sun, 21 Jun 2026 06:17:30 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Vulnerability_response__Built_for_humans__outpaced_by_machin.png" alt="Vulnerability response: Built for humans, outpaced by machines." style="max-width: 100%; border-radius: 8px;" /></p> <p>Frontier models now discover and chain vulnerabilities faster than human analysts can confirm them, and the gap between finding and fixing is shrinking in...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/02_6_years_fullstack_dev__1_week_into_bug_bounty__zero_findings/https://securityxp.com/articles/02_6_years_fullstack_dev__1_week_into_bug_bounty__zero_findings/Dev-to-hunter transition: Any other devs here who struggled with the mindset shift from "making things work" to "breaking things intentionally"? What I've...Sun, 21 Jun 2026 06:17:30 GMT <p><img src="https://securityxp.com/uploads/heroes/02_6_years_Fullstack_Dev__1_week_into_bug_bounty__zero_findings.png" alt="6 years Fullstack Dev, 1 week into bug bounty, zero findings. How long did your first valid bug take?" style="max-width: 100%; border-radius: 8px;" /></p> <p>Dev-to-hunter transition: Any other devs here who struggled with the mindset shift from "making things work" to "breaking things intentionally"? What I've...</p> Cybersecurity Careers / WorkforceSecurityXPhttps://securityxp.com/articles/03_privacy-preserving_outsourced_witness_updates_for_append-onl/https://securityxp.com/articles/03_privacy-preserving_outsourced_witness_updates_for_append-onl/In this paper, we present a privacy-preserving outsourced witness-update protocol for append-only RSA accumulators. The protocol combines witness updates...Sun, 21 Jun 2026 06:17:30 GMT <p><img src="https://securityxp.com/uploads/heroes/03_Privacy-Preserving_Outsourced_Witness_Updates_for_Append-Onl.png" alt="Privacy-Preserving Outsourced Witness Updates for Append-Only RSA Accumulators Security Research" style="max-width: 100%; border-radius: 8px;" /></p> <p>In this paper, we present a privacy-preserving outsourced witness-update protocol for append-only RSA accumulators. The protocol combines witness updates...</p> ResearchSecurityXPhttps://securityxp.com/articles/04_navigating_the_gps_threat_landscape__with_brandon_karpf/https://securityxp.com/articles/04_navigating_the_gps_threat_landscape__with_brandon_karpf/If this research is accurate, these attacks represent a significant evolution for how defenders think about this critical technology. Key sources: -...Sun, 21 Jun 2026 06:17:30 GMT <p><img src="https://securityxp.com/uploads/heroes/04_Navigating_the_GPS_threat_landscape__with_Brandon_Karpf.png" alt="Navigating the GPS threat landscape, with Brandon Karpf. Cyberwarfare" style="max-width: 100%; border-radius: 8px;" /></p> <p>If this research is accurate, these attacks represent a significant evolution for how defenders think about this critical technology. Key sources: -...</p> Cyberwarfare / Nation-StateSecurityXPhttps://securityxp.com/articles/01_google_shor_algorithm_obfuscation_broken_llm_crowdsourcing_outperforms_zkp_verified_benchmark/https://securityxp.com/articles/01_google_shor_algorithm_obfuscation_broken_llm_crowdsourcing_outperforms_zkp_verified_benchmark/An open-source contest utilizing Large Language Models (LLMs) has successfully reverse-engineered and optimized Google Quantum AI's restricted Shor's algorithm circuit optimization, exceeding Google's obfuscated benchmark by 44.0%.Sun, 21 Jun 2026 01:30:50 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Google_Shor_Algorithm_Obfuscation_Broken_LLM_Crowdsourcing_Outperforms_ZKP_Verified_Benchmark.png" alt="Google Shor's Algorithm Obfuscation Broken: LLM Crowdsourcing Outperforms ZKP-Verified Benchmark by 44%" style="max-width: 100%; border-radius: 8px;" /></p> <p>An open-source contest utilizing Large Language Models (LLMs) has successfully reverse-engineered and optimized Google Quantum AI's restricted Shor's algorithm circuit optimization, exceeding Google's obfuscated benchmark by 44.0%.</p> ResearchSecurityXPhttps://securityxp.com/articles/02_major_data_breach_warning_issued_for_3_million_in_texas__wha/https://securityxp.com/articles/02_major_data_breach_warning_issued_for_3_million_in_texas__wha/Major Data Breach Warning Issued for 3 Million in Texas: What To Know...Sat, 20 Jun 2026 13:30:44 GMT <p><img src="https://securityxp.com/uploads/heroes/02_Major_Data_Breach_Warning_Issued_for_3_Million_in_Texas__Wha.png" alt="Major Data Breach Warning Issued for 3 Million in Texas: What To Know" style="max-width: 100%; border-radius: 8px;" /></p> <p>Major Data Breach Warning Issued for 3 Million in Texas: What To Know...</p> Data BreachesSecurityXPhttps://securityxp.com/articles/03_form__report_a_suspected_breach_of_farming_rules_or_fraud/https://securityxp.com/articles/03_form__report_a_suspected_breach_of_farming_rules_or_fraud/Report a suspected breach of farming rules or fraud How to report a suspected breach of farming rules or fraud to the Rural Payments Agency. Applies to...Sat, 20 Jun 2026 13:30:44 GMT <p><img src="https://securityxp.com/uploads/heroes/03_Form__Report_a_suspected_breach_of_farming_rules_or_fraud.png" alt="Form: Report a suspected breach of farming rules or fraud Compliance" style="max-width: 100%; border-radius: 8px;" /></p> <p>Report a suspected breach of farming rules or fraud How to report a suspected breach of farming rules or fraud to the Rural Payments Agency. Applies to...</p> Compliance & PrivacySecurityXPhttps://securityxp.com/articles/01_hackers_exploit_gravity_smtp_wordpress_plugin_bug_to_expose/https://securityxp.com/articles/01_hackers_exploit_gravity_smtp_wordpress_plugin_bug_to_expose/The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information disclosure flaw that can allow unauthenticated attackers to...Sat, 20 Jun 2026 13:22:39 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Hackers_Exploit_Gravity_SMTP_WordPress_Plugin_Bug_to_Expose.png" alt="Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys Vulnerability (CVE-2026-4020)" style="max-width: 100%; border-radius: 8px;" /></p> <p>The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information disclosure flaw that can allow unauthenticated attackers to...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/02_the_gentlemen_raas_uses_gentlekiller_edr_framework_targeting/https://securityxp.com/articles/02_the_gentlemen_raas_uses_gentlekiller_edr_framework_targeting/It allows The Gentlemen operators to integrate abused drivers into their toolset very soon after an EDR killer PoC is disclosed." The third-party...Sat, 20 Jun 2026 13:22:39 GMT <p><img src="https://securityxp.com/uploads/heroes/02_The_Gentlemen_RaaS_Uses_GentleKiller_EDR_Framework_Targeting.png" alt="The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes Malware" style="max-width: 100%; border-radius: 8px;" /></p> <p>It allows The Gentlemen operators to integrate abused drivers into their toolset very soon after an EDR killer PoC is disclosed." The third-party...</p> Malware & RansomwareSecurityXPhttps://securityxp.com/articles/03_spur_adds_no-code_cloudflare_integration_for_monocle/https://securityxp.com/articles/03_spur_adds_no-code_cloudflare_integration_for_monocle/"These updates ensure that customers can implement inline enforcement in minutes, gain deeper visibility into user behavior, and quickly translate those...Sat, 20 Jun 2026 13:22:39 GMT <p><img src="https://securityxp.com/uploads/heroes/03_Spur_adds_no-code_Cloudflare_integration_for_Monocle.png" alt="Spur adds no-code Cloudflare integration for Monocle Cloud Security" style="max-width: 100%; border-radius: 8px;" /></p> <p>"These updates ensure that customers can implement inline enforcement in minutes, gain deeper visibility into user behavior, and quickly translate those...</p> Cloud SecuritySecurityXPhttps://securityxp.com/articles/04_klue_oauth_breach_victim_list_grows_as_icarus_hackers_claim/https://securityxp.com/articles/04_klue_oauth_breach_victim_list_grows_as_icarus_hackers_claim/Market intelligence platform Klue has publicly confirmed a recent security incident that allowed threat actors to steal OAuth tokens used to connect to...Sat, 20 Jun 2026 13:22:39 GMT <p><img src="https://securityxp.com/uploads/heroes/04_Klue_OAuth_breach_victim_list_grows_as_Icarus_hackers_claim.png" alt="Klue OAuth breach victim list grows as Icarus hackers claim attack Data Breach" style="max-width: 100%; border-radius: 8px;" /></p> <p>Market intelligence platform Klue has publicly confirmed a recent security incident that allowed threat actors to steal OAuth tokens used to connect to...</p> Data BreachesSecurityXPhttps://securityxp.com/articles/01_novo_nordisk_breached__ozempic_maker_suffers_264_gb_data_lea/https://securityxp.com/articles/01_novo_nordisk_breached__ozempic_maker_suffers_264_gb_data_lea/They allegedly breached Novo in March via a GitHub access token that let it clone the company's repositories and find additional credentials.Fri, 19 Jun 2026 18:25:00 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Novo_Nordisk_Breached__Ozempic_Maker_Suffers_264_GB_Data_Lea.png" alt="Novo Nordisk Breached: Ozempic Maker Suffers 264 GB Data Leak" style="max-width: 100%; border-radius: 8px;" /></p> <p>They allegedly breached Novo in March via a GitHub access token that let it clone the company's repositories and find additional credentials.</p> Data BreachesSecurityXPhttps://securityxp.com/articles/02_ai-enabled_hacker_caught__leaked_prompts_expose_resume__ip/https://securityxp.com/articles/02_ai-enabled_hacker_caught__leaked_prompts_expose_resume__ip/A fully AI-enabled hacker was caught, revealing his full system prompts, which included his resume and his IP address.Fri, 19 Jun 2026 18:25:00 GMT <p><img src="https://securityxp.com/uploads/heroes/02_AI-Enabled_Hacker_Caught__Leaked_Prompts_Expose_Resume__IP.png" alt="AI-Enabled Hacker Caught: Leaked Prompts Expose Resume and IP Address" style="max-width: 100%; border-radius: 8px;" /></p> <p>A fully AI-enabled hacker was caught, revealing his full system prompts, which included his resume and his IP address.</p> AI/ML SecuritySecurityXPhttps://securityxp.com/articles/04_weekly_metasploit_update__ntlm_relay_priv_esc__mcp_server_in/https://securityxp.com/articles/04_weekly_metasploit_update__ntlm_relay_priv_esc__mcp_server_in/New module content (5) Paperclip AI RCE using a chain of six API calls (CVE-2026-41679) Authors: Sagilayani https://github.com/sagilayani and h00die-gr3y...Fri, 19 Jun 2026 18:25:00 GMT <p><img src="https://securityxp.com/uploads/heroes/04_Weekly_Metasploit_Update__NTLM_Relay_Priv_Esc__MCP_Server_In.png" alt="Weekly Metasploit Update: NTLM Relay Priv Esc, MCP Server Integration, Paperclip AI RCE Chain, and more" style="max-width: 100%; border-radius: 8px;" /></p> <p>New module content (5) Paperclip AI RCE using a chain of six API calls (CVE-2026-41679) Authors: Sagilayani https://github.com/sagilayani and h00die-gr3y...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/05_autojack_attack_lets_one_web_page_hijack_ai_agent_for_host_c/https://securityxp.com/articles/05_autojack_attack_lets_one_web_page_hijack_ai_agent_for_host_c/Microsoft made a similar localhost argument in its Semantic Kernel RCE research, tracked as CVE-2026-26030 and CVE-2026-25592. The issue is tracked as...Fri, 19 Jun 2026 18:25:00 GMT <p><img src="https://securityxp.com/uploads/heroes/05_AutoJack_Attack_Lets_One_Web_Page_Hijack_AI_Agent_for_Host_C.png" alt="AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution Vulnerability" style="max-width: 100%; border-radius: 8px;" /></p> <p>Microsoft made a similar localhost argument in its Semantic Kernel RCE research, tracked as CVE-2026-26030 and CVE-2026-25592. The issue is tracked as...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/06_meteor_3_0_migration_helped_rocket_chat_move_off_end-of-life/https://securityxp.com/articles/06_meteor_3_0_migration_helped_rocket_chat_move_off_end-of-life/Supply-Chain Risk Without a CVE Meteor 3.0 puts a name to a category of supply-chain risk that standard vulnerability management does not always catch. The...Fri, 19 Jun 2026 18:25:00 GMT <p><img src="https://securityxp.com/uploads/heroes/06_Meteor_3_0_Migration_Helped_Rocket_Chat_Move_Off_End-of-Life.png" alt="Meteor 3.0 Migration Helped Rocket.Chat Move Off End-of-Life Node.js Runtime App Security" style="max-width: 100%; border-radius: 8px;" /></p> <p>Supply-Chain Risk Without a CVE Meteor 3.0 puts a name to a category of supply-chain risk that standard vulnerability management does not always catch. The...</p> Application SecuritySecurityXPhttps://securityxp.com/articles/03_14_971_wordpress_sites_cleaned_in_global_socgholish_takedown/https://securityxp.com/articles/03_14_971_wordpress_sites_cleaned_in_global_socgholish_takedown/Data from Infoblox shows that approximately 55% of its cloud customers attempted to reach SocGholish infrastructure this year alone, with the attacks...Fri, 19 Jun 2026 16:29:52 GMT <p><img src="https://securityxp.com/uploads/heroes/03_14_971_WordPress_Sites_Cleaned_in_Global_SocGholish_Takedown.png" alt="14,971 WordPress Sites Cleaned in Global SocGholish Takedown Cybercrime" style="max-width: 100%; border-radius: 8px;" /></p> <p>Data from Infoblox shows that approximately 55% of its cloud customers attempted to reach SocGholish infrastructure this year alone, with the attacks...</p> CybercrimeSecurityXPhttps://securityxp.com/articles/04_apple_patches_beats_studio_buds_flaw_that_could_turn_earbuds/https://securityxp.com/articles/04_apple_patches_beats_studio_buds_flaw_that_could_turn_earbuds/The security update fixes CVE-2025-20701, a vulnerability discovered by Dennis Heinze and Frieder Steinmetz of German cybersecurity firm ERNW. The issue is...Fri, 19 Jun 2026 16:29:52 GMT <p><img src="https://securityxp.com/uploads/heroes/04_Apple_patches_Beats_Studio_Buds_flaw_that_could_turn_earbuds.png" alt="Apple patches Beats Studio Buds flaw that could turn earbuds into a wiretap Vulnerability" style="max-width: 100%; border-radius: 8px;" /></p> <p>The security update fixes CVE-2025-20701, a vulnerability discovered by Dennis Heinze and Frieder Steinmetz of German cybersecurity firm ERNW. The issue is...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/05_every_ai_agent_is_an_identity__most_organizations_don_t_trea/https://securityxp.com/articles/05_every_ai_agent_is_an_identity__most_organizations_don_t_trea/This is no longer theoretical, 65% of organizations experienced a security incident involving an AI agent in the past year, with 61% reporting exposure or...Fri, 19 Jun 2026 16:29:52 GMT <p><img src="https://securityxp.com/uploads/heroes/05_Every_AI_Agent_Is_an_Identity__Most_Organizations_Don_t_Trea.png" alt="Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way AI Security" style="max-width: 100%; border-radius: 8px;" /></p> <p>This is no longer theoretical, 65% of organizations experienced a security incident involving an AI agent in the past year, with 61% reporting exposure or...</p> AI/ML SecuritySecurityXPhttps://securityxp.com/articles/06_what_is_application_security_testing__tools_and_types/https://securityxp.com/articles/06_what_is_application_security_testing__tools_and_types/Organizations that already enforce quality gates in CI/CD can extend that model into deployment workflows by requiring review of critical cloud exposures...Fri, 19 Jun 2026 16:29:52 GMT <p><img src="https://securityxp.com/uploads/heroes/06_What_Is_Application_Security_Testing__Tools_and_Types.png" alt="What Is Application Security Testing? Tools and Types App Security" style="max-width: 100%; border-radius: 8px;" /></p> <p>Organizations that already enforce quality gates in CI/CD can extend that model into deployment workflows by requiring review of critical cloud exposures...</p> Application SecuritySecurityXPhttps://securityxp.com/articles/01_microsoft_confirms_rogueplanet_zero-day_in_defender__patch_u/https://securityxp.com/articles/01_microsoft_confirms_rogueplanet_zero-day_in_defender__patch_u/I think it even works in the case of passive mode, but not really sure, haven't tested that." Microsoft told The Hacker News last week that it's aware of the...Thu, 18 Jun 2026 09:58:39 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Microsoft_Confirms_RoguePlanet_Zero-Day_in_Defender__Patch_U.png" alt="Microsoft Confirms RoguePlanet Zero-Day in Defender, Patch Under Development Vulnerability" style="max-width: 100%; border-radius: 8px;" /></p> <p>I think it even works in the case of passive mode, but not really sure, haven't tested that." Microsoft told The Hacker News last week that it's aware of the...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/02_spycloud_report_finds_phishing_attacks_surge_as_employee_dat/https://securityxp.com/articles/02_spycloud_report_finds_phishing_attacks_surge_as_employee_dat/SpyCloud, the leader in identity threat protection, today released its 2026 Phishing Pulse Report, revealing that phishing attacks continue to increase in...Thu, 18 Jun 2026 09:58:39 GMT <p><img src="https://securityxp.com/uploads/heroes/02_SpyCloud_Report_Finds_Phishing_Attacks_Surge_as_Employee_Dat.png" alt="SpyCloud Report Finds Phishing Attacks Surge as Employee Data Is Exposed at 86% of Fortune 100 Companies" style="max-width: 100%; border-radius: 8px;" /></p> <p>SpyCloud, the leader in identity threat protection, today released its 2026 Phishing Pulse Report, revealing that phishing attacks continue to increase in...</p> CybercrimeSecurityXPhttps://securityxp.com/articles/03_ovhcloud_previews_ai_workspace_with_encrypted_tools/https://securityxp.com/articles/03_ovhcloud_previews_ai_workspace_with_encrypted_tools/OVHcloud says OVHai Workspace includes an end-to-end encryption option covering data and communications, including within partner applications integrated...Thu, 18 Jun 2026 09:58:39 GMT <p><img src="https://securityxp.com/uploads/heroes/03_OVHcloud_previews_AI_workspace_with_encrypted_tools.png" alt="OVHcloud previews AI workspace with encrypted tools AI Security" style="max-width: 100%; border-radius: 8px;" /></p> <p>OVHcloud says OVHai Workspace includes an end-to-end encryption option covering data and communications, including within partner applications integrated...</p> AI/ML SecuritySecurityXPhttps://securityxp.com/articles/04_mastra_npm_packages_compromised_in__easy-day-js__supply_chai/https://securityxp.com/articles/04_mastra_npm_packages_compromised_in__easy-day-js__supply_chai/By exploiting npm’s install-time script execution, attackers gained the ability to harvest browser data from Chrome, Edge, and Brave, extract credentials...Thu, 18 Jun 2026 09:58:39 GMT <p><img src="https://securityxp.com/uploads/heroes/04_Mastra_npm_packages_compromised_in__easy-day-js__supply_chai.png" alt="Mastra npm packages compromised in 'easy-day-js' supply chain attack App Security" style="max-width: 100%; border-radius: 8px;" /></p> <p>By exploiting npm’s install-time script execution, attackers gained the ability to harvest browser data from Chrome, Edge, and Brave, extract credentials...</p> Application SecuritySecurityXPhttps://securityxp.com/articles/01_kodak_confirms_data_breach_following_shinyhunters__claim_of/https://securityxp.com/articles/01_kodak_confirms_data_breach_following_shinyhunters__claim_of/One week ago, the extortion group also claimed responsibility for a new series of breaches at over 100 organizations(including the University of Nottingham)...Wed, 17 Jun 2026 13:54:33 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Kodak_Confirms_Data_Breach_Following_ShinyHunters__Claim_of.png" alt="Kodak Confirms Data Breach Following ShinyHunters’ Claim of Stolen Customer Records" style="max-width: 100%; border-radius: 8px;" /></p> <p>One week ago, the extortion group also claimed responsibility for a new series of breaches at over 100 organizations(including the University of Nottingham)...</p> Data BreachesSecurityXPhttps://securityxp.com/articles/02_cisa_warns_of_oracle_peoplesoft_0-day_vulnerability_exploite/https://securityxp.com/articles/02_cisa_warns_of_oracle_peoplesoft_0-day_vulnerability_exploite/Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding the active exploitation of a critical vulnerability in Oracle...Wed, 17 Jun 2026 13:54:33 GMT <p><img src="https://securityxp.com/uploads/heroes/02_CISA_Warns_of_Oracle_PeopleSoft_0-Day_Vulnerability_Exploite.png" alt="CISA Warns of Oracle PeopleSoft 0-Day Vulnerability Exploited in Ransomware Attacks (CVE-2026-35273)" style="max-width: 100%; border-radius: 8px;" /></p> <p>Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding the active exploitation of a critical vulnerability in Oracle...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/03_heimdal_survey__executives_four_times_more_confident_about_a/https://securityxp.com/articles/03_heimdal_survey__executives_four_times_more_confident_about_a/London, United Kingdom, June 17th, 2026, CyberNewswire New research from cybersecurity company Heimdal finds 29% of US executives say AI risk is under...Wed, 17 Jun 2026 13:54:33 GMT <p><img src="https://securityxp.com/uploads/heroes/03_Heimdal_Survey__Executives_Four_Times_More_Confident_About_A.png" alt="Heimdal Survey: Executives Four Times More Confident About AI Risk Than the Teams Managing It" style="max-width: 100%; border-radius: 8px;" /></p> <p>London, United Kingdom, June 17th, 2026, CyberNewswire New research from cybersecurity company Heimdal finds 29% of US executives say AI risk is under...</p> AI/ML SecuritySecurityXPhttps://securityxp.com/articles/04_144_mastra_npm_packages_compromised_via_hijacked_contributor/https://securityxp.com/articles/04_144_mastra_npm_packages_compromised_via_hijacked_contributor/"This makes the Mastra ecosystem an exceptionally high-value target for supply chain attackers." The "easy-day-js" package launches an obfuscated payload...Wed, 17 Jun 2026 13:54:33 GMT <p><img src="https://securityxp.com/uploads/heroes/04_144_Mastra_npm_Packages_Compromised_via_Hijacked_Contributor.png" alt="144 Mastra npm Packages Compromised via Hijacked Contributor Account App Security" style="max-width: 100%; border-radius: 8px;" /></p> <p>"This makes the Mastra ecosystem an exceptionally high-value target for supply chain attackers." The "easy-day-js" package launches an obfuscated payload...</p> Application SecuritySecurityXPhttps://securityxp.com/articles/01_jetbrains_plugin_security_alert__70_000__installs_linked_to/https://securityxp.com/articles/01_jetbrains_plugin_security_alert__70_000__installs_linked_to/While these plugins function as advertised, offering features like code review, chat, and […] The post JetBrains Plugin Security Alert: 70,000+ Installs...Wed, 17 Jun 2026 05:43:29 GMT <p><img src="https://securityxp.com/uploads/heroes/01_JetBrains_Plugin_Security_Alert__70_000__Installs_Linked_to.png" alt="JetBrains Plugin Security Alert: 70,000+ Installs Linked to AI Key Theft Vulnerability" style="max-width: 100%; border-radius: 8px;" /></p> <p>While these plugins function as advertised, offering features like code review, chat, and […] The post JetBrains Plugin Security Alert: 70,000+ Installs...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/01_zyxel_security_advisory__av26-603/https://securityxp.com/articles/01_zyxel_security_advisory__av26-603/Serial number: AV26-603Date: June 16, 2026 On June 16, 2026, Zyxel published a security advisory to address vulnerabilities in the following products: GS1900...Tue, 16 Jun 2026 13:51:43 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Zyxel_security_advisory__AV26-603.png" alt="Zyxel security advisory (AV26-603) Vulnerability" style="max-width: 100%; border-radius: 8px;" /></p> <p>Serial number: AV26-603Date: June 16, 2026 On June 16, 2026, Zyxel published a security advisory to address vulnerabilities in the following products: GS1900...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/01_chinese_hackers_breach_redcap_servers__steal_medical_researc/https://securityxp.com/articles/01_chinese_hackers_breach_redcap_servers__steal_medical_researc/"Their research areas span a broad spectrum of modern medicine, from molecular discovery and clinical drug trials to state-level public health policy and...Mon, 15 Jun 2026 14:50:23 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Chinese_hackers_breach_REDCap_servers__steal_medical_researc.png" alt="Chinese hackers breach REDCap servers, steal medical research Data Breach" style="max-width: 100%; border-radius: 8px;" /></p> <p>"Their research areas span a broad spectrum of modern medicine, from molecular discovery and clinical drug trials to state-level public health policy and...</p> Data BreachesSecurityXPhttps://securityxp.com/articles/02_how_attackers_are_jailbreaking_llms_with_ctf_framing_and_how/https://securityxp.com/articles/02_how_attackers_are_jailbreaking_llms_with_ctf_framing_and_how/Over the past 30 days, we’ve collected data from other source IPs that validate our jailbreaking theory: 159.89.93.86 created a LiteLLM master-scoped API key...Mon, 15 Jun 2026 14:50:23 GMT <p><img src="https://securityxp.com/uploads/heroes/02_How_attackers_are_jailbreaking_LLMs_with_CTF_framing_and_how.png" alt="How attackers are jailbreaking LLMs with CTF framing and how to catch them AI Security" style="max-width: 100%; border-radius: 8px;" /></p> <p>Over the past 30 days, we’ve collected data from other source IPs that validate our jailbreaking theory: 159.89.93.86 created a LiteLLM master-scoped API key...</p> AI/ML SecuritySecurityXPhttps://securityxp.com/articles/04_chinese-linked_hackers_targeted_us__canadian_research_facili/https://securityxp.com/articles/04_chinese-linked_hackers_targeted_us__canadian_research_facili/Between September 2023 and November 2025, the hackers sought information related to defense intelligence, military strategy in the Indo-Pacific, artificial...Mon, 15 Jun 2026 14:50:23 GMT <p><img src="https://securityxp.com/uploads/heroes/04_Chinese-linked_hackers_targeted_US__Canadian_research_facili.png" alt="Chinese-linked hackers targeted US, Canadian research facilities for a year: Google Threat Alert" style="max-width: 100%; border-radius: 8px;" /></p> <p>Between September 2023 and November 2025, the hackers sought information related to defense intelligence, military strategy in the Indo-Pacific, artificial...</p> Threat IntelligenceSecurityXPhttps://securityxp.com/articles/01_palo_alto_warns_of_exploitation_of_vpn_bypass_exploits__cve-/https://securityxp.com/articles/01_palo_alto_warns_of_exploitation_of_vpn_bypass_exploits__cve-/"Only a small portion of the probed devices actually established VPN sessions, resulting in gateway-connected events." The company has also released...Mon, 15 Jun 2026 14:00:39 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Palo_Alto_Warns_of_Exploitation_of_VPN_Bypass_Exploits__CVE-.png" alt="Palo Alto Warns of Exploitation of VPN Bypass Exploits (CVE-2026-0257) in PAN-OS Flaw Vulnerability" style="max-width: 100%; border-radius: 8px;" /></p> <p>"Only a small portion of the probed devices actually established VPN sessions, resulting in gateway-connected events." The company has also released...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/02_conti_ransomware_conspirator_pleads_guilty_in__150m_scheme/https://securityxp.com/articles/02_conti_ransomware_conspirator_pleads_guilty_in__150m_scheme/Department of Justice announced that Oleksii Oleksiyovych Lytvynenko, 44, admitted to participating in a conspiracy that deployed Conti ransomware against...Mon, 15 Jun 2026 14:00:39 GMT <p><img src="https://securityxp.com/uploads/heroes/02_Conti_Ransomware_Conspirator_Pleads_Guilty_in__150M_Scheme.png" alt="Conti Ransomware Conspirator Pleads Guilty in $150M Scheme Cybercrime" style="max-width: 100%; border-radius: 8px;" /></p> <p>Department of Justice announced that Oleksii Oleksiyovych Lytvynenko, 44, admitted to participating in a conspiracy that deployed Conti ransomware against...</p> CybercrimeSecurityXPhttps://securityxp.com/articles/03_supply_chain_attack_hits_popular_wordpress_plugins_through_a/https://securityxp.com/articles/03_supply_chain_attack_hits_popular_wordpress_plugins_through_a/According to the company's investigation, attackers exploited a known vulnerability in a third-party plugin called UpdraftPlus running on a marketing website...Mon, 15 Jun 2026 14:00:39 GMT <p><img src="https://securityxp.com/uploads/heroes/03_Supply_Chain_Attack_Hits_Popular_WordPress_Plugins_Through_A.png" alt="Supply Chain Attack Hits Popular WordPress Plugins Through Awesome Motive CDN App Security" style="max-width: 100%; border-radius: 8px;" /></p> <p>According to the company's investigation, attackers exploited a known vulnerability in a third-party plugin called UpdraftPlus running on a marketing website...</p> Application SecuritySecurityXPhttps://securityxp.com/articles/03_microsoft_restricts_employee_claude_fable_5_access_over_data/https://securityxp.com/articles/03_microsoft_restricts_employee_claude_fable_5_access_over_data/Microsoft restricts employee access to Claude Fable 5 while legal reviews Anthropic's 30-day retention policy, which can retain flagged content for two years.Sun, 14 Jun 2026 21:30:00 GMT <p><img src="https://securityxp.com/uploads/heroes/03_Microsoft_restricts_employee_Claude_Fable_5_access_over_data.png" alt="Microsoft restricts employee Claude Fable 5 access over Anthropic data retention" style="max-width: 100%; border-radius: 8px;" /></p> <p>Microsoft restricts employee access to Claude Fable 5 while legal reviews Anthropic's 30-day retention policy, which can retain flagged content for two years.</p> AI/ML SecuritySecurityXPhttps://securityxp.com/articles/01_ex-school_district_employee_jailed_for_hacks_on_former_emplo/https://securityxp.com/articles/01_ex-school_district_employee_jailed_for_hacks_on_former_emplo/Potter is also required to pay $59,668.81 in restitution to the Saydel Community School District and its insurer, Travelers Casualty and Surety Company, for...Sun, 14 Jun 2026 14:42:27 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Ex-school_district_employee_jailed_for_hacks_on_former_emplo.png" alt="Ex-school district employee jailed for hacks on former employer Cybercrime" style="max-width: 100%; border-radius: 8px;" /></p> <p>Potter is also required to pay $59,668.81 in restitution to the Saydel Community School District and its insurer, Travelers Casualty and Surety Company, for...</p> CybercrimeSecurityXPhttps://securityxp.com/articles/02_anthropic_ban__sarvam_ai_s_pratyush_kumar_warns_against_reli/https://securityxp.com/articles/02_anthropic_ban__sarvam_ai_s_pratyush_kumar_warns_against_reli/Kumar detailed that Sarvam has trained models at scale on roughly 3,400 Nvidia H100 GPUs and has brought India's first Blackwell cluster online, targeting...Sun, 14 Jun 2026 14:42:27 GMT <p><img src="https://securityxp.com/uploads/heroes/02_Anthropic_ban__Sarvam_AI_s_Pratyush_Kumar_warns_against_reli.png" alt="Anthropic ban: Sarvam AI's Pratyush Kumar warns against reliance on foreign models" style="max-width: 100%; border-radius: 8px;" /></p> <p>Kumar detailed that Sarvam has trained models at scale on roughly 3,400 Nvidia H100 GPUs and has brought India's first Blackwell cluster online, targeting...</p> Commentary / OpinionSecurityXPhttps://securityxp.com/articles/01_washington_pulled_the_plug_on_anthropic__s_fable_5_and_mytho/https://securityxp.com/articles/01_washington_pulled_the_plug_on_anthropic__s_fable_5_and_mytho/The organizations that had integrated these models into security operations, threat hunting pipelines, and vulnerability research workflows are now running...Sat, 13 Jun 2026 15:26:49 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Washington_Pulled_the_Plug_on_Anthropic__s_Fable_5_and_Mytho.png" alt="Washington Pulled the Plug on Anthropic ‘s Fable 5 and Mythos 5 models. The Rest of the World Is Watching." style="max-width: 100%; border-radius: 8px;" /></p> <p>The organizations that had integrated these models into security operations, threat hunting pipelines, and vulnerability research workflows are now running...</p> AI/ML SecuritySecurityXPhttps://securityxp.com/articles/01_google_sues_chinese_cybercrime_network_for_using_gemini_ai_t/https://securityxp.com/articles/01_google_sues_chinese_cybercrime_network_for_using_gemini_ai_t/Google is taking legal action against a Chinese cybercrime network it says abused its Gemini AI agent to send phishing texts and steal data from Americans.Sat, 13 Jun 2026 04:43:18 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Google_Sues_Chinese_Cybercrime_Network_for_Using_Gemini_AI_t.png" alt="Google Sues Chinese Cybercrime Network for Using Gemini AI to Target Americans" style="max-width: 100%; border-radius: 8px;" /></p> <p>Google is taking legal action against a Chinese cybercrime network it says abused its Gemini AI agent to send phishing texts and steal data from Americans.</p> CybercrimeSecurityXPhttps://securityxp.com/articles/02_ukrainian_national_pleads_guilty_to_role_in_conti_ransomware/https://securityxp.com/articles/02_ukrainian_national_pleads_guilty_to_role_in_conti_ransomware/A Ukrainian national pleaded guilty to his role in the Conti ransomware operation, which struck over 1,000 victims worldwide before disbanding in 2022.Sat, 13 Jun 2026 04:43:18 GMT <p><img src="https://securityxp.com/uploads/heroes/02_Ukrainian_national_pleads_guilty_to_role_in_Conti_ransomware.png" alt="Ukrainian national pleads guilty to role in Conti ransomware operation" style="max-width: 100%; border-radius: 8px;" /></p> <p>A Ukrainian national pleaded guilty to his role in the Conti ransomware operation, which struck over 1,000 victims worldwide before disbanding in 2022.</p> CybercrimeSecurityXPhttps://securityxp.com/articles/01_authorities_dismantle_cryptocurrency_laundering_services__au/https://securityxp.com/articles/01_authorities_dismantle_cryptocurrency_laundering_services__au/Law enforcement dismantled the 'AudiA6' crypto-laundering service, arresting two administrators and seizing 30+ servers and 25 domains tied to ransomware.Fri, 12 Jun 2026 10:56:07 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Authorities_Dismantle_Cryptocurrency_Laundering_Services__Au.png" alt="Authorities Dismantle Cryptocurrency Laundering Service 'AudiA6' Used by Cybercriminals" style="max-width: 100%; border-radius: 8px;" /></p> <p>Law enforcement dismantled the 'AudiA6' crypto-laundering service, arresting two administrators and seizing 30+ servers and 25 domains tied to ransomware.</p> CybercrimeSecurityXPhttps://securityxp.com/articles/02_oracle_mitigates_peoplesoft_zero-day_exploited_in_data_theft/https://securityxp.com/articles/02_oracle_mitigates_peoplesoft_zero-day_exploited_in_data_theft/Oracle has issued mitigations for a critical PeopleSoft zero-day (CVE-2026-35273) enabling unauthenticated RCE, actively exploited in ShinyHunters data theft.Fri, 12 Jun 2026 10:56:07 GMT <p><img src="https://securityxp.com/uploads/heroes/02_Oracle_mitigates_PeopleSoft_zero-day_exploited_in_data_theft.png" alt="Oracle mitigates PeopleSoft zero-day exploited in data theft attacks" style="max-width: 100%; border-radius: 8px;" /></p> <p>Oracle has issued mitigations for a critical PeopleSoft zero-day (CVE-2026-35273) enabling unauthenticated RCE, actively exploited in ShinyHunters data theft.</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/01_github_finally_pulls_the_plug_on_automatic_install_script_ex/https://securityxp.com/articles/01_github_finally_pulls_the_plug_on_automatic_install_script_ex/GitHub is ending automatic execution of npm install scripts to curb supply-chain attacks, starting with opt-in warnings in npm version 11.Thu, 11 Jun 2026 13:17:57 GMT <p><img src="https://securityxp.com/uploads/heroes/01_GitHub_finally_pulls_the_plug_on_automatic_install_script_ex.png" alt="GitHub finally pulls the plug on automatic install script execution" style="max-width: 100%; border-radius: 8px;" /></p> <p>GitHub is ending automatic execution of npm install scripts to curb supply-chain attacks, starting with opt-in warnings in npm version 11.</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/02_oracle_peoplesoft_servers_hacked_in_shinyhunters_data_theft/https://securityxp.com/articles/02_oracle_peoplesoft_servers_hacked_in_shinyhunters_data_theft/ShinyHunters, or a group impersonating them, has been targeting Oracle PeopleSoft ERP servers in data theft attacks, with researchers publishing IP-address IOCs.Thu, 11 Jun 2026 13:17:57 GMT <p><img src="https://securityxp.com/uploads/heroes/02_Oracle_PeopleSoft_servers_hacked_in_ShinyHunters_data_theft.png" alt="Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks" style="max-width: 100%; border-radius: 8px;" /></p> <p>ShinyHunters, or a group impersonating them, has been targeting Oracle PeopleSoft ERP servers in data theft attacks, with researchers publishing IP-address IOCs.</p> Data BreachesSecurityXPhttps://securityxp.com/articles/01_ivanti_releases_patches_for_critical_sentry_vulnerabilities/https://securityxp.com/articles/01_ivanti_releases_patches_for_critical_sentry_vulnerabilities/Ivanti has patched two critical Sentry vulnerabilities (CVE-2026-10520 and CVE-2026-10523) affecting the gateway that secures traffic to mobile devices.Wed, 10 Jun 2026 18:26:05 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Ivanti_releases_patches_for_critical_Sentry_vulnerabilities.png" alt="Ivanti releases patches for critical Sentry vulnerabilities" style="max-width: 100%; border-radius: 8px;" /></p> <p>Ivanti has patched two critical Sentry vulnerabilities (CVE-2026-10520 and CVE-2026-10523) affecting the gateway that secures traffic to mobile devices.</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/01_microsoft_patches_record_200_vulnerabilities_in_june_2026_pa/https://securityxp.com/articles/01_microsoft_patches_record_200_vulnerabilities_in_june_2026_pa/Microsoft's June 2026 Patch Tuesday fixes a record 200 vulnerabilities, including a critical Active Directory RCE (CVE-2026-45648, CVSS 8.8).Wed, 10 Jun 2026 15:47:54 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Microsoft_Patches_Record_200_Vulnerabilities_in_June_2026_Pa.png" alt="Microsoft Patches Record 200 Vulnerabilities in June 2026 Patch Tuesday" style="max-width: 100%; border-radius: 8px;" /></p> <p>Microsoft's June 2026 Patch Tuesday fixes a record 200 vulnerabilities, including a critical Active Directory RCE (CVE-2026-45648, CVSS 8.8).</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/01_microsoft_june_2026_security_updates/https://securityxp.com/articles/01_microsoft_june_2026_security_updates/Microsoft's Urgent Security Update Microsoft has just released a massive security update, fixing 204 vulnerabilities, including 38 critical ones. This is a...Wed, 10 Jun 2026 02:36:03 GMT <p><img src="https://securityxp.com/uploads/heroes/01_Microsoft_June_2026_Security_Updates.png" alt="Microsoft June 2026 Security Updates" style="max-width: 100%; border-radius: 8px;" /></p> <p>Microsoft's Urgent Security Update Microsoft has just released a massive security update, fixing 204 vulnerabilities, including 38 critical ones. This is a...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/01_sap_fixes_critical_flaws_in_netweaver_and_commerce_cloud/https://securityxp.com/articles/01_sap_fixes_critical_flaws_in_netweaver_and_commerce_cloud/Uncovering Critical Flaws in SAP NetWeaver and Commerce Cloud SAP's June 2026 Security Patch package is a big deal. It fixes 15 vulnerabilities, including...Tue, 09 Jun 2026 19:50:38 GMT <p><img src="https://securityxp.com/uploads/heroes/01_SAP_fixes_critical_flaws_in_NetWeaver_and_Commerce_Cloud.png" alt="SAP fixes critical flaws in NetWeaver and Commerce Cloud" style="max-width: 100%; border-radius: 8px;" /></p> <p>Uncovering Critical Flaws in SAP NetWeaver and Commerce Cloud SAP's June 2026 Security Patch package is a big deal. It fixes 15 vulnerabilities, including...</p> Vulnerabilities & ExploitsSecurityXPhttps://securityxp.com/articles/02_can_voice_agents_handle_bilingual_customers__benchmarking_fr/https://securityxp.com/articles/02_can_voice_agents_handle_bilingual_customers__benchmarking_fr/The Code-Switching Conundrum More than half of the world's population speaks more than one language. Code-switching, the practice of switching between...Tue, 09 Jun 2026 19:50:38 GMT <p><img src="https://securityxp.com/uploads/heroes/02_Can_Voice_Agents_Handle_Bilingual_Customers__Benchmarking_Fr.png" alt="Can Voice Agents Handle Bilingual Customers? Benchmarking Frontier ASR on Code-Switched Speech" style="max-width: 100%; border-radius: 8px;" /></p> <p>The Code-Switching Conundrum More than half of the world's population speaks more than one language. Code-switching, the practice of switching between...</p> ResearchSecurityXPhttps://securityxp.com/articles/is-openais-new-lockdown-mode-an-admission-that-default-chatgpt-was-never-safe/https://securityxp.com/articles/is-openais-new-lockdown-mode-an-admission-that-default-chatgpt-was-never-safe/As AI-powered chatbots expand across customer service, technical support, and enterprise workflows, they become increasingly attractive targets for attackers seeking to extract sensitive data.Mon, 08 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/is-openais-new-lockdown-mode-an-admission-that-default-chatgpt-was-never-safe.png" alt="Is OpenAI Lockdown Mode an Admission of Risk? Enough?" style="max-width: 100%; border-radius: 8px;" /></p> <p>As AI-powered chatbots expand across customer service, technical support, and enterprise workflows, they become increasingly attractive targets for attackers seeking to extract sensitive data.</p> AI/ML SecuritySecurityXP Intelligence Deskhttps://securityxp.com/articles/meta-ai-recovery-tool-flaw-exposed-20000-instagram-accounts/https://securityxp.com/articles/meta-ai-recovery-tool-flaw-exposed-20000-instagram-accounts/This incident is a clear example of the ongoing risks associated with AI-powered support systems. The vulnerability allowed attackers to reset passwords without verifying email addresses associated wi...Mon, 08 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/meta-ai-recovery-tool-flaw-exposed-20000-instagram-accounts.png" alt="Meta AI Flaw Exposes 20K Instagram Accounts" style="max-width: 100%; border-radius: 8px;" /></p> <p>This incident is a clear example of the ongoing risks associated with AI-powered support systems. The vulnerability allowed attackers to reset passwords without verifying email addresses associated wi...</p> Data BreachesSecurityXP Intelligence Deskhttps://securityxp.com/articles/cisa-flags-solarwinds-serv-u-flaw-as-actively-exploited-cve-2026-28318/https://securityxp.com/articles/cisa-flags-solarwinds-serv-u-flaw-as-actively-exploited-cve-2026-28318/Over 12,000 SolarWinds Serv-U file transfer servers sit exposed to the internet. Attackers are already knocking them offline.Sat, 06 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/cisa-flags-solarwinds-serv-u-flaw-as-actively-exploited-cve-2026-28318.png" alt="CISA Flags SolarWinds Serv-U Flaw as Exploited" style="max-width: 100%; border-radius: 8px;" /></p> <p>Over 12,000 SolarWinds Serv-U file transfer servers sit exposed to the internet. Attackers are already knocking them offline.</p> Vulnerabilities & ExploitsSecurityXP Intelligence Deskhttps://securityxp.com/articles/cisco-sd-wan-manager-under-active-attack-with-no-patch-cve-2026-20245/https://securityxp.com/articles/cisco-sd-wan-manager-under-active-attack-with-no-patch-cve-2026-20245/Cisco has confirmed active exploitation of a high-severity vulnerability in Catalyst SD-WAN Manager. The flaw, CVE-2026-20245, scores 7.8 on the CVSS scale.Sat, 06 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/cisco-sd-wan-manager-under-active-attack-with-no-patch-cve-2026-20245.png" alt="Cisco SD-WAN Manager Under Attack, No Patch Yet" style="max-width: 100%; border-radius: 8px;" /></p> <p>Cisco has confirmed active exploitation of a high-severity vulnerability in Catalyst SD-WAN Manager. The flaw, CVE-2026-20245, scores 7.8 on the CVSS scale.</p> Vulnerabilities & ExploitsSecurityXP Intelligence Deskhttps://securityxp.com/articles/everest-forms-pro-plugin-rce-lets-attackers-own-wordpress-cve-2026-3300/https://securityxp.com/articles/everest-forms-pro-plugin-rce-lets-attackers-own-wordpress-cve-2026-3300/Hackers are actively exploiting a critical vulnerability in the Everest Forms Pro WordPress plugin right now. The flaw, tracked as CVE-2026-3300, allows unauthenticated attackers to execute arbitrary ...Sat, 06 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/everest-forms-pro-plugin-rce-lets-attackers-own-wordpress-cve-2026-3300.png" alt="Everest Forms Pro RCE: WordPress Sites at Risk" style="max-width: 100%; border-radius: 8px;" /></p> <p>Hackers are actively exploiting a critical vulnerability in the Everest Forms Pro WordPress plugin right now. The flaw, tracked as CVE-2026-3300, allows unauthenticated attackers to execute arbitrary ...</p> Vulnerabilities & ExploitsSecurityXP Intelligence Deskhttps://securityxp.com/articles/ubiquiti-unifi-os-critical-auth-bypass-enables-root-rce-cve-2026-34908/https://securityxp.com/articles/ubiquiti-unifi-os-critical-auth-bypass-enables-root-rce-cve-2026-34908/Ubiquiti disclosed three critical vulnerabilities in UniFi OS Server on May 21, 2026. Each scores a perfect 10.0 on the CVSS scale.Sat, 06 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/ubiquiti-unifi-os-critical-auth-bypass-enables-root-rce-cve-2026-34908.png" alt="Ubiquiti UniFi OS Auth Bypass Enables Root RCE" style="max-width: 100%; border-radius: 8px;" /></p> <p>Ubiquiti disclosed three critical vulnerabilities in UniFi OS Server on May 21, 2026. Each scores a perfect 10.0 on the CVSS scale.</p> Vulnerabilities & ExploitsSecurityXP Intelligence Deskhttps://securityxp.com/articles/71-of-socs-report-ai-is-underdelivering-the-second-wave-must-fix-it/https://securityxp.com/articles/71-of-socs-report-ai-is-underdelivering-the-second-wave-must-fix-it/Eighteen months ago, the AI SOC was a marketing line. Today it is a budget item.Fri, 05 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/71-of-socs-report-ai-is-underdelivering-the-second-wave-must-fix-it.png" alt="71% of SOCs Say AI Is Underdelivering: Report" style="max-width: 100%; border-radius: 8px;" /></p> <p>Eighteen months ago, the AI SOC was a marketing line. Today it is a budget item.</p> Security OperationsSecurityXP Intelligence Deskhttps://securityxp.com/articles/attackers-weaponize-ai-chatbot-trust-to-hijack-gpus-and-mine-crypto/https://securityxp.com/articles/attackers-weaponize-ai-chatbot-trust-to-hijack-gpus-and-mine-crypto/Microsoft has spotted something new. Attackers are manipulating SEO rankings and AI chatbot recommendations to push fake utilities onto users who trust what the AI tells them.Fri, 05 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/attackers-weaponize-ai-chatbot-trust-to-hijack-gpus-and-mine-crypto.png" alt="AI Chatbot Trust Weaponized to Mine Crypto" style="max-width: 100%; border-radius: 8px;" /></p> <p>Microsoft has spotted something new. Attackers are manipulating SEO rankings and AI chatbot recommendations to push fake utilities onto users who trust what the AI tells them.</p> Data BreachesSecurityXP Intelligence Deskhttps://securityxp.com/articles/gulf-executives-face-surge-in-whatsapp-impersonation-attacks/https://securityxp.com/articles/gulf-executives-face-surge-in-whatsapp-impersonation-attacks/It starts with a message. A senior executive at a Dubai energy firm opens WhatsApp and sees what looks like a text from their CEO.Fri, 05 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/gulf-executives-face-surge-in-whatsapp-impersonation-attacks.png" alt="Gulf Executives Face WhatsApp Impersonation" style="max-width: 100%; border-radius: 8px;" /></p> <p>It starts with a message. A senior executive at a Dubai energy firm opens WhatsApp and sees what looks like a text from their CEO.</p> Threat IntelligenceSecurityXP Intelligence Deskhttps://securityxp.com/articles/acer-addresses-critical-zero-day-vulnerabilities-in-wave-7-routers/https://securityxp.com/articles/acer-addresses-critical-zero-day-vulnerabilities-in-wave-7-routers/The vulnerability allows unauthenticated attackers to access sensitive credentials from log archives. It's a broken access control flaw, which enables attackers to obtain plaintext credentials.Thu, 04 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/acer-addresses-critical-zero-day-vulnerabilities-in-wave-7-routers.png" alt="Acer Addresses Zero-Day in Wave 7 Routers" style="max-width: 100%; border-radius: 8px;" /></p> <p>The vulnerability allows unauthenticated attackers to access sensitive credentials from log archives. It's a broken access control flaw, which enables attackers to obtain plaintext credentials.</p> Vulnerabilities & ExploitsSecurityXP Intelligence Deskhttps://securityxp.com/articles/br-ppt30-operating-system/https://securityxp.com/articles/br-ppt30-operating-system/This operating system is widely used in industrial automation worldwide. The issue affects versions prior to 1.8.0.Thu, 04 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/br-ppt30-operating-system.png" alt="B&R PPT30 Operating System" style="max-width: 100%; border-radius: 8px;" /></p> <p>This operating system is widely used in industrial automation worldwide. The issue affects versions prior to 1.8.0.</p> Vulnerabilities & ExploitsSecurityXP Intelligence Deskhttps://securityxp.com/articles/can-someone-please-eli5-yellowkey-cve-2026-45585-to-me-an-it-admin-that/https://securityxp.com/articles/can-someone-please-eli5-yellowkey-cve-2026-45585-to-me-an-it-admin-that/The vulnerability, identified as CVE-2026-45585, has significant implications for organizations using Windows PE, versions 10 and 11, and CrowdStrike, versions 6.0 and later.Thu, 04 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/can-someone-please-eli5-yellowkey-cve-2026-45585-to-me-an-it-admin-that.png" alt="ELI5: YellowKey (CVE-2026-45585) BitLocker Bypass that survived the Great Global CrowdStrike Outage of 24)" style="max-width: 100%; border-radius: 8px;" /></p> <p>The vulnerability, identified as CVE-2026-45585, has significant implications for organizations using Windows PE, versions 10 and 11, and CrowdStrike, versions 6.0 and later.</p> Vulnerabilities & ExploitsSecurityXP Intelligence Deskhttps://securityxp.com/articles/cisa-adds-exploited-magento-rce-flaw-cve-2026-45247-to-kev-catalog/https://securityxp.com/articles/cisa-adds-exploited-magento-rce-flaw-cve-2026-45247-to-kev-catalog/This vulnerability, tracked as CVE-2026-45247, has a CVSS score of 9.8. Cybersecurity and Infrastructure Security Agency added this flaw to its Known Exploited Vulnerabilities catalog.Thu, 04 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/cisa-adds-exploited-magento-rce-flaw-cve-2026-45247-to-kev-catalog.png" alt="CISA Adds Magento RCE CVE-2026-45247 to KEV" style="max-width: 100%; border-radius: 8px;" /></p> <p>This vulnerability, tracked as CVE-2026-45247, has a CVSS score of 9.8. Cybersecurity and Infrastructure Security Agency added this flaw to its Known Exploited Vulnerabilities catalog.</p> Vulnerabilities & ExploitsSecurityXP Intelligence Deskhttps://securityxp.com/articles/cisco-unified-communications-manager-vulnerability-exposed-along-with-poc/https://securityxp.com/articles/cisco-unified-communications-manager-vulnerability-exposed-along-with-poc/This vulnerability, identified as CVE-2026-20230, has a CVSS score of 8.6. That's a significant threat.Thu, 04 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/cisco-unified-communications-manager-vulnerability-exposed-along-with-poc.png" alt="Cisco Unified Comms Manager Vuln & PoC Released Code" style="max-width: 100%; border-radius: 8px;" /></p> <p>This vulnerability, identified as CVE-2026-20230, has a CVSS score of 8.6. That's a significant threat.</p> Vulnerabilities & ExploitsSecurityXP Intelligence Deskhttps://securityxp.com/articles/hitachi-energy-itt600-explorer/https://securityxp.com/articles/hitachi-energy-itt600-explorer/The vulnerability, identified as CVE-2024-8176, can be exploited to carry out a Denial of Service attack on the product, potentially disrupting essential services in the energy sector.Thu, 04 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/hitachi-energy-itt600-explorer.png" alt="Hitachi Energy ITT600 Explorer" style="max-width: 100%; border-radius: 8px;" /></p> <p>The vulnerability, identified as CVE-2024-8176, can be exploited to carry out a Denial of Service attack on the product, potentially disrupting essential services in the energy sector.</p> Vulnerabilities & ExploitsSecurityXP Intelligence Deskhttps://securityxp.com/articles/icann-sets-the-october-2026-dns-trust-anchor-rollover/https://securityxp.com/articles/icann-sets-the-october-2026-dns-trust-anchor-rollover/The Domain Name System, or DNS, is getting a major update to its security protocol. This update, scheduled for October 2026, affects the DNS Security Extensions root zone Key Signing Key, a crucial co...Thu, 04 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/icann-sets-the-october-2026-dns-trust-anchor-rollover.png" alt="ICANN Sets October 2026 DNS Trust Anchor Rollover" style="max-width: 100%; border-radius: 8px;" /></p> <p>The Domain Name System, or DNS, is getting a major update to its security protocol. This update, scheduled for October 2026, affects the DNS Security Extensions root zone Key Signing Key, a crucial co...</p> TechnologySecurityXP Intelligence Deskhttps://securityxp.com/articles/offroad-emerges-from-stealth-with-7-million-to-tackle-enterprise-identity-risk/https://securityxp.com/articles/offroad-emerges-from-stealth-with-7-million-to-tackle-enterprise-identity-risk/Offroad has emerged from stealth with $7 million in seed funding, led by Ibex Investors and Skywell Capital, to tackle enterprise identity risk.Thu, 04 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/offroad-emerges-from-stealth-with-7-million-to-tackle-enterprise-identity-risk.png" alt="Offroad Emerges From Stealth With $7 Million to Tackle Enterprise Identity Risk" style="max-width: 100%; border-radius: 8px;" /></p> <p>Offroad has emerged from stealth with $7 million in seed funding, led by Ibex Investors and Skywell Capital, to tackle enterprise identity risk.</p> Identity & Access ManagementSecurityXP Intelligence Deskhttps://securityxp.com/articles/code-is-cheap/https://securityxp.com/articles/code-is-cheap/It's counterintuitive, given the significant cost of producing code, including salaries and headcount. But there's a crucial distinction between production costs and the value of the code itself.Wed, 03 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/code-is-cheap.png" alt="Code is cheap" style="max-width: 100%; border-radius: 8px;" /></p> <p>It's counterintuitive, given the significant cost of producing code, including salaries and headcount. But there's a crucial distinction between production costs and the value of the code itself.</p> Commentary / OpinionSecurityXP Editorial Deskhttps://securityxp.com/articles/google-patches-android-zero-day-cve-2025-48595-exploited-in-targeted-attacks/https://securityxp.com/articles/google-patches-android-zero-day-cve-2025-48595-exploited-in-targeted-attacks/One flaw, CVE-2025-48595, is particularly alarming. This vulnerability has a CVSS score of 8.4.Wed, 03 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/google-patches-android-zero-day-cve-2025-48595-exploited-in-targeted-attacks.png" alt="Google Patches Android Zero-Day CVE-2025-48595" style="max-width: 100%; border-radius: 8px;" /></p> <p>One flaw, CVE-2025-48595, is particularly alarming. This vulnerability has a CVSS score of 8.4.</p> Vulnerabilities & ExploitsSecurityXP Intelligence Deskhttps://securityxp.com/articles/hackers-used-metas-ai-support-bot-to-seize-instagram-accounts/https://securityxp.com/articles/hackers-used-metas-ai-support-bot-to-seize-instagram-accounts/High-profile Instagram profiles, including those of former US President Barack Obama, the U.S. Space Force, and Sephora, were compromised after attackers social engineered Meta's AI-powered support assistant.Wed, 03 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/hackers-used-metas-ai-support-bot-to-seize-instagram-accounts.png" alt="Hackers Used Meta AI Bot to Steal Instagrams" style="max-width: 100%; border-radius: 8px;" /></p> <p>High-profile Instagram profiles, including those of former US President Barack Obama, the U.S. Space Force, and Sephora, were compromised after attackers social engineered Meta's AI-powered support assistant.</p> AI/ML SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/two-year-old-oracle-weblogic-server-vulnerability-is-being-exploited/https://securityxp.com/articles/two-year-old-oracle-weblogic-server-vulnerability-is-being-exploited/This was patched by Oracle in July 2024. The vulnerability allows an unauthenticated attacker with network access to take control of susceptible Oracle WebLogic Server instances.Wed, 03 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/two-year-old-oracle-weblogic-server-vulnerability-is-being-exploited.png" alt="Old Oracle WebLogic Flaw Now Under Active Exploit" style="max-width: 100%; border-radius: 8px;" /></p> <p>This was patched by Oracle in July 2024. The vulnerability allows an unauthenticated attacker with network access to take control of susceptible Oracle WebLogic Server instances.</p> TechnologySecurityXP Editorial Deskhttps://securityxp.com/articles/us-cisa-adds-android-and-linux-kernel-flaws-to-its-known-exploited/https://securityxp.com/articles/us-cisa-adds-android-and-linux-kernel-flaws-to-its-known-exploited/Cybersecurity and Infrastructure Security Agency, CISA, has just added two significant vulnerabilities to its Known Exploited Vulnerabilities catalog.Wed, 03 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/us-cisa-adds-android-and-linux-kernel-flaws-to-its-known-exploited.png" alt="CISA Adds Android & Linux Kernel Flaws to KEV catalog" style="max-width: 100%; border-radius: 8px;" /></p> <p>Cybersecurity and Infrastructure Security Agency, CISA, has just added two significant vulnerabilities to its Known Exploited Vulnerabilities catalog.</p> Vulnerabilities & ExploitsSecurityXP Intelligence Deskhttps://securityxp.com/articles/google-fixes-one-actively-exploited-android-zero-day-124-flaws/https://securityxp.com/articles/google-fixes-one-actively-exploited-android-zero-day-124-flaws/Google's June 2026 Android update patches 124 vulnerabilities, including an actively exploited zero-day in the Android Framework tracked as CVE-2025-48595.Tue, 02 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/google-fixes-one-actively-exploited-android-zero-day-124-flaws.png" alt="Google fixes one actively exploited Android zero-day, 124 flaws" style="max-width: 100%; border-radius: 8px;" /></p> <p>Google's June 2026 Android update patches 124 vulnerabilities, including an actively exploited zero-day in the Android Framework tracked as CVE-2025-48595.</p> TechnologySecurityXP Editorial Deskhttps://securityxp.com/articles/infected-red-hat-npm-packages-expose-developer-credentials/https://securityxp.com/articles/infected-red-hat-npm-packages-expose-developer-credentials/This malware is a new variant of the Shai-Hulud credential-stealing malware. It's designed to steal developer credentials, cloud secrets, SSH keys, CI/CD tokens, and other sensitive information.Tue, 02 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/infected-red-hat-npm-packages-expose-developer-credentials.png" alt="Infected Red Hat npm Packages Leak Credentials" style="max-width: 100%; border-radius: 8px;" /></p> <p>This malware is a new variant of the Shai-Hulud credential-stealing malware. It's designed to steal developer credentials, cloud secrets, SSH keys, CI/CD tokens, and other sensitive information.</p> TechnologySecurityXP Editorial Deskhttps://securityxp.com/articles/critical-windows-netlogon-rce-flaw-now-exploited-in-attacks/https://securityxp.com/articles/critical-windows-netlogon-rce-flaw-now-exploited-in-attacks/This vulnerability, tracked as CVE-2026-41089, has a CVSS score of 9.8. It's a stack-based buffer overflow issue that could be exploited via crafted network requests.Mon, 01 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/critical-windows-netlogon-rce-flaw-now-exploited-in-attacks.png" alt="Critical Windows Netlogon RCE Flaw Exploited" style="max-width: 100%; border-radius: 8px;" /></p> <p>This vulnerability, tracked as CVE-2026-41089, has a CVSS score of 9.8. It's a stack-based buffer overflow issue that could be exploited via crafted network requests.</p> TechnologySecurityXP Editorial Deskhttps://securityxp.com/articles/cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-in-hp-poly-vvx-and/https://securityxp.com/articles/cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-in-hp-poly-vvx-and/Hackers can exploit this vulnerability, CVE-2026-0826, to achieve unauthenticated remote code execution with root privileges on a target device.Mon, 01 Jun 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-in-hp-poly-vvx-and.png" alt="CVE-2026-0826: HP Poly VVX VoIP Buffer Overflow and Trio VoIP Phones (FIXED)" style="max-width: 100%; border-radius: 8px;" /></p> <p>Hackers can exploit this vulnerability, CVE-2026-0826, to achieve unauthenticated remote code execution with root privileges on a target device.</p> TechnologySecurityXP Editorial Deskhttps://securityxp.com/articles/carnival-data-breach-impacts-nearly-6-million-customers/https://securityxp.com/articles/carnival-data-breach-impacts-nearly-6-million-customers/According to filings with the Maine Attorney General , the cruise operator is sending notification letters to 5,995,277 customers and employees. Hackers got in and exfiltrated sensitive files.Sun, 31 May 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/carnival-data-breach-impacts-nearly-6-million-customers.png" alt="Carnival Data Breach Impacts 6 Million Customers" style="max-width: 100%; border-radius: 8px;" /></p> <p>According to filings with the Maine Attorney General , the cruise operator is sending notification letters to 5,995,277 customers and employees. Hackers got in and exfiltrated sensitive files.</p> TechnologySecurityXP Editorial Deskhttps://securityxp.com/articles/rapid7-observed-exploitation-of-pan-os-globalprotect-authentication-bypass/https://securityxp.com/articles/rapid7-observed-exploitation-of-pan-os-globalprotect-authentication-bypass/Attackers are actively exploiting a high-severity authentication bypass vulnerability in Palo Alto Networks GlobalProtect portals and gateways, allowing remote attackers to establish unauthorized VPN access to corporate networks.Sun, 31 May 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/rapid7-observed-exploitation-of-pan-os-globalprotect-authentication-bypass.png" alt="Rapid7: PAN-OS GlobalProtect Bypass Exploited" style="max-width: 100%; border-radius: 8px;" /></p> <p>Attackers are actively exploiting a high-severity authentication bypass vulnerability in Palo Alto Networks GlobalProtect portals and gateways, allowing remote attackers to establish unauthorized VPN access to corporate networks.</p> Vulnerabilities & ExploitsSecurityXP Editorial Deskhttps://securityxp.com/articles/7-eleven-data-breach-exposes-personal-information-of-185000-people/https://securityxp.com/articles/7-eleven-data-breach-exposes-personal-information-of-185000-people/The ShinyHunters extortion gang claimed responsibility, leaked a 9.4GB archive of stolen data, and is now selling it on underground forums after the company refused to pay a ransom.Fri, 29 May 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/7-eleven-data-breach-exposes-personal-information-of-185000-people.png" alt="7-Eleven Data Breach: 185,000 People Exposed" style="max-width: 100%; border-radius: 8px;" /></p> <p>The ShinyHunters extortion gang claimed responsibility, leaked a 9.4GB archive of stolen data, and is now selling it on underground forums after the company refused to pay a ransom.</p> TechnologySecurityXP Editorial Deskhttps://securityxp.com/articles/fbi-warns-of-kali365-the-fast-growing-phishing-kit-stealing-microsoft-365/https://securityxp.com/articles/fbi-warns-of-kali365-the-fast-growing-phishing-kit-stealing-microsoft-365/By exploiting legitimate OAuth device code authentication, Kali365 bypasses multi-factor authentication entirely... and that's a game-changer.Fri, 29 May 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/fbi-warns-of-kali365-the-fast-growing-phishing-kit-stealing-microsoft-365.png" alt="FBI Warns of Kali365 Phishing Kit Targeting M365 Access Tokens'" style="max-width: 100%; border-radius: 8px;" /></p> <p>By exploiting legitimate OAuth device code authentication, Kali365 bypasses multi-factor authentication entirely... and that's a game-changer.</p> TechnologySecurityXP Editorial Deskhttps://securityxp.com/articles/ghost-cms-flaw-abused-to-push-clickfix-attacks-on-hundreds-of-sites/https://securityxp.com/articles/ghost-cms-flaw-abused-to-push-clickfix-attacks-on-hundreds-of-sites/and it's getting out of hand. Over 700 legitimate domains have been poisoned, including university portals and major technology brands.Fri, 29 May 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/ghost-cms-flaw-abused-to-push-clickfix-attacks-on-hundreds-of-sites.png" alt="Ghost CMS Flaw Powers ClickFix Attacks at Scale" style="max-width: 100%; border-radius: 8px;" /></p> <p>and it's getting out of hand. Over 700 legitimate domains have been poisoned, including university portals and major technology brands.</p> TechnologySecurityXP Editorial Deskhttps://securityxp.com/articles/eu-ai-security-regulations/https://securityxp.com/articles/eu-ai-security-regulations/The European Union has introduced comprehensive AI security regulations requiring organizations to implement security measures for AI systems. We break down the requirements, timelines, and compliance steps.Sun, 24 May 2026 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/eu-ai-security-regulations.png" alt="New EU AI Security Regulations for Organizations" style="max-width: 100%; border-radius: 8px;" /></p> <p>The European Union has introduced comprehensive AI security regulations requiring organizations to implement security measures for AI systems. We break down the requirements, timelines, and compliance steps.</p> AI/ML SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/limitations-of-stride-in-threat-modeling-ai-agents/https://securityxp.com/articles/limitations-of-stride-in-threat-modeling-ai-agents/The STRIDE threat modeling framework is insufficient for securing AI agents due to their non-deterministic and autonomous nature, requiring a new approach to identify and mitigate potential threatsThu, 26 Mar 2026 05:07:00 GMT <p><img src="https://securityxp.com/uploads/heroes/limitations-of-stride-in-threat-modeling-ai-agents.png" alt="Limitations of STRIDE in Threat Modeling AI Agents" style="max-width: 100%; border-radius: 8px;" /></p> <p>The STRIDE threat modeling framework is insufficient for securing AI agents due to their non-deterministic and autonomous nature, requiring a new approach to identify and mitigate potential threats</p> AI/ML SecuritySecurityXPhttps://securityxp.com/articles/red-teaming-generative-ai-language-as-the-new-exploit-vector/https://securityxp.com/articles/red-teaming-generative-ai-language-as-the-new-exploit-vector/Generative AI systems are vulnerable to attacks via natural language, with 35% of real-world AI security incidents caused by simple prompts, highlighting the need for cybersecurity practitioners to adapt their skills to this new threat landscapeWed, 18 Feb 2026 02:24:00 GMT <p><img src="https://securityxp.com/uploads/heroes/red-teaming-generative-ai-language-as-the-new-exploit-vector.png" alt="Red Teaming Generative AI: Language as the New Exploit Vector" style="max-width: 100%; border-radius: 8px;" /></p> <p>Generative AI systems are vulnerable to attacks via natural language, with 35% of real-world AI security incidents caused by simple prompts, highlighting the need for cybersecurity practitioners to adapt their skills to this new threat landscape</p> AI/ML SecuritySecurityXPhttps://securityxp.com/articles/fortifying-iot-devices-against-cyber-threats/https://securityxp.com/articles/fortifying-iot-devices-against-cyber-threats/IoT devices are vulnerable to hidden cyber threats, and threat modeling is essential to anticipate and mitigate these risksThu, 16 Oct 2025 14:44:00 GMT <p><img src="https://securityxp.com/uploads/heroes/fortifying-iot-devices-against-cyber-threats.png" alt="Fortifying IoT Devices Against Cyber Threats" style="max-width: 100%; border-radius: 8px;" /></p> <p>IoT devices are vulnerable to hidden cyber threats, and threat modeling is essential to anticipate and mitigate these risks</p> IoT SecuritySecurityXPhttps://securityxp.com/articles/implementing-maestro-framework-for-enhanced-ml-security/https://securityxp.com/articles/implementing-maestro-framework-for-enhanced-ml-security/The MAESTRO framework provides a layered approach to securing machine learning models and agentic AI, enabling organizations to map and defend against complex threatsSun, 05 Oct 2025 22:50:00 GMT <p><img src="https://securityxp.com/uploads/heroes/implementing-maestro-framework-for-enhanced-ml-security.png" alt="Implementing MAESTRO Framework for Enhanced ML Security" style="max-width: 100%; border-radius: 8px;" /></p> <p>The MAESTRO framework provides a layered approach to securing machine learning models and agentic AI, enabling organizations to map and defend against complex threats</p> AI/ML SecuritySecurityXPhttps://securityxp.com/articles/essential-security-moves-for-leaders-in-the-age-of-ai/https://securityxp.com/articles/essential-security-moves-for-leaders-in-the-age-of-ai/As AI adoption accelerates in enterprises, security leaders must implement layered security strategies to mitigate evolving threats and protect complex digital architecturesSat, 04 Oct 2025 22:15:00 GMT <p><img src="https://securityxp.com/uploads/heroes/essential-security-moves-for-leaders-in-the-age-of-ai.png" alt="Essential Security Moves for Leaders in the Age of AI" style="max-width: 100%; border-radius: 8px;" /></p> <p>As AI adoption accelerates in enterprises, security leaders must implement layered security strategies to mitigate evolving threats and protect complex digital architectures</p> AI/ML SecuritySecurityXPhttps://securityxp.com/articles/cisa-issues-nine-urgent-advisories-on-industrial-control-systems-vulnerabilities/https://securityxp.com/articles/cisa-issues-nine-urgent-advisories-on-industrial-control-systems-vulnerabilities/In a critical bulletin released on September 18, 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) published nine new advisories detailing high-severity vulnerabilities affecti...Thu, 18 Sep 2025 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/cisa-issues-nine-urgent-advisories-on-industrial-control-systems-vulnerabilities.png" alt="CISA Issues Nine Urgent ICS Advisories" style="max-width: 100%; border-radius: 8px;" /></p> <p>In a critical bulletin released on September 18, 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) published nine new advisories detailing high-severity vulnerabilities affecti...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/critical-google-chrome-zero-day-cve-2025-10585-what-you-need-to-know/https://securityxp.com/articles/critical-google-chrome-zero-day-cve-2025-10585-what-you-need-to-know/Google has just patched a critical zero-day vulnerability in its Chrome web browser—CVE-2025-10585—which has been actively exploited in the wild. This flaw, a type confusion issue in Chrome’s V8 Ja...Thu, 18 Sep 2025 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/critical-google-chrome-zero-day-cve-2025-10585-what-you-need-to-know.png" alt="Critical Chrome Zero-Day CVE-2025-10585 Explained" style="max-width: 100%; border-radius: 8px;" /></p> <p>Google has just patched a critical zero-day vulnerability in its Chrome web browser—CVE-2025-10585—which has been actively exploited in the wild. This flaw, a type confusion issue in Chrome’s V8 Ja...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/malware-analysis-report-on-a-malicious-listener-deployed-on-ivanti-endpoint-manager-mobile-epmm-systems/https://securityxp.com/articles/malware-analysis-report-on-a-malicious-listener-deployed-on-ivanti-endpoint-manager-mobile-epmm-systems/U.S. Cybersecurity and Infrastructure Security Agency’s new Malware Analysis Report on a malicious listener deployed on Ivanti Endpoint Manager Mobile (EPMM) systems by chaining CVE-2025-4427 and C...Thu, 18 Sep 2025 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/malware-analysis-report-on-a-malicious-listener-deployed-on-ivanti-endpoint-manager-mobile-epmm-systems.png" alt="Ivanti EPMM Malicious Listener Malware Analysis" style="max-width: 100%; border-radius: 8px;" /></p> <p>U.S. Cybersecurity and Infrastructure Security Agency’s new Malware Analysis Report on a malicious listener deployed on Ivanti Endpoint Manager Mobile (EPMM) systems by chaining CVE-2025-4427 and C...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/mssp-alert-top-250-for-2024-a-deep-dive-into-the-state-of-cybersecurity/https://securityxp.com/articles/mssp-alert-top-250-for-2024-a-deep-dive-into-the-state-of-cybersecurity/Discover the key findings from the 2024 MSSP Alert Top 250 report. Explore trends in MSSP growth, profitability, in-house SOCs, and the critical services defining modern cyber defense.Sun, 22 Jun 2025 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/mssp-alert-top-250-for-2024-a-deep-dive-into-the-state-of-cybersecurity.png" alt="MSSP Alert Top 250 for 2024: Cybersecurity State" style="max-width: 100%; border-radius: 8px;" /></p> <p>Discover the key findings from the 2024 MSSP Alert Top 250 report. Explore trends in MSSP growth, profitability, in-house SOCs, and the critical services defining modern cyber defense.</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/pakistan-linked-apt36-exploits-pahalgam-terror-attack-theme-in-multi-pronged-cyber-espionage-campaign-against-india/https://securityxp.com/articles/pakistan-linked-apt36-exploits-pahalgam-terror-attack-theme-in-multi-pronged-cyber-espionage-campaign-against-india/The Pakistan-linked APT group APT36 (Transparent Tribe) is using a 'Pahalgam terror attack' lure in a multi-pronged cyber-espionage campaign targeting India.Sat, 26 Apr 2025 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/pakistan-linked-apt36-exploits-pahalgam-terror-attack-theme-in-multi-pronged-cyber-espionage-campaign-against-india.png" alt="Pakistan-Linked APT36 Exploits 'Pahalgam' Terror Attack Theme in Cyber-Espionage Campaign Against India" style="max-width: 100%; border-radius: 8px;" /></p> <p>The Pakistan-linked APT group APT36 (Transparent Tribe) is using a 'Pahalgam terror attack' lure in a multi-pronged cyber-espionage campaign targeting India.</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/unpacking-cve-2025-29927-a-deep-dive-into-the-next-js-path-traversal-vulnerability/https://securityxp.com/articles/unpacking-cve-2025-29927-a-deep-dive-into-the-next-js-path-traversal-vulnerability/Next.js has rapidly become a dominant force in the React ecosystem, lauded for its developer experience and performance optimizations. However, like any complex framework, it's not immune to securi...Tue, 25 Mar 2025 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/unpacking-cve-2025-29927-a-deep-dive-into-the-next-js-path-traversal-vulnerability.png" alt="CVE-2025-29927: Next.js Path Traversal Deep Dive" style="max-width: 100%; border-radius: 8px;" /></p> <p>Next.js has rapidly become a dominant force in the React ecosystem, lauded for its developer experience and performance optimizations. However, like any complex framework, it's not immune to securi...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/mitre-attckcon-5-0-elevating-cybersecurity-knowledge/https://securityxp.com/articles/mitre-attckcon-5-0-elevating-cybersecurity-knowledge/Cybersecurity remains at the forefront of the global conversation, and MITRE ATT&CKcon 5.0 is a pivotal event in the field. Scheduled for October 22-23, 2024, in McLean, Virginia, the conference se...Sat, 07 Sep 2024 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/mitre-attckcon-5-0-elevating-cybersecurity-knowledge.png" alt="MITRE ATT&CKcon 5.0: Elevating Cybersecurity" style="max-width: 100%; border-radius: 8px;" /></p> <p>Cybersecurity remains at the forefront of the global conversation, and MITRE ATT&CKcon 5.0 is a pivotal event in the field. Scheduled for October 22-23, 2024, in McLean, Virginia, the conference se...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/a-cyberrisk-alliance-resource-mssp-alert-top-250-mssps-service-providers-2023-edition/https://securityxp.com/articles/a-cyberrisk-alliance-resource-mssp-alert-top-250-mssps-service-providers-2023-edition/As cyber threats evolve, so do the strategies to combat them. The latest MSSP Alert: Top 250 MSSPs Service Providers 2023 Edition , released by CyberRisk Alliance , offers valuable insights inThu, 05 Sep 2024 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/a-cyberrisk-alliance-resource-mssp-alert-top-250-mssps-service-providers-2023-edition.png" alt="MSSP Alert Top 250 MSSPs 2023 Edition Released" style="max-width: 100%; border-radius: 8px;" /></p> <p>As cyber threats evolve, so do the strategies to combat them. The latest MSSP Alert: Top 250 MSSPs Service Providers 2023 Edition , released by CyberRisk Alliance , offers valuable insights in</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/threat-modeling-for-proactive-cyber-defense/https://securityxp.com/articles/threat-modeling-for-proactive-cyber-defense/Threat modeling is a critical tool for identifying and mitigating potential security threats, allowing organizations to proactively safeguard their assets and maintain trust in an increasingly hostile cyber environment.Sun, 18 Aug 2024 10:08:00 GMT <p><img src="https://securityxp.com/uploads/heroes/threat-modeling-for-proactive-cyber-defense.png" alt="Threat Modeling for Proactive Cyber Defense" style="max-width: 100%; border-radius: 8px;" /></p> <p>Threat modeling is a critical tool for identifying and mitigating potential security threats, allowing organizations to proactively safeguard their assets and maintain trust in an increasingly hostile cyber environment.</p> Threat IntelligenceSecurityXPhttps://securityxp.com/articles/cyber-resilience-through-threat-modeling-techniques/https://securityxp.com/articles/cyber-resilience-through-threat-modeling-techniques/Implementing cutting-edge threat modeling techniques is crucial for mitigating cyber threats and enhancing security posture in today's rapidly evolving technological landscapeWed, 05 Jun 2024 15:06:00 GMT <p><img src="https://securityxp.com/uploads/heroes/cyber-resilience-through-threat-modeling-techniques.png" alt="Cyber Resilience Through Threat Modeling Techniques" style="max-width: 100%; border-radius: 8px;" /></p> <p>Implementing cutting-edge threat modeling techniques is crucial for mitigating cyber threats and enhancing security posture in today's rapidly evolving technological landscape</p> Threat IntelligenceSecurityXPhttps://securityxp.com/articles/threat-modeling-tools-for-enhanced-security-strategy/https://securityxp.com/articles/threat-modeling-tools-for-enhanced-security-strategy/This article explores the benefits and key features of threat modeling tools, highlighting their importance in enhancing security strategies and posturesWed, 05 Jun 2024 03:39:00 GMT <p><img src="https://securityxp.com/uploads/heroes/threat-modeling-tools-for-enhanced-security-strategy.png" alt="Threat Modeling Tools for Enhanced Security Strategy" style="max-width: 100%; border-radius: 8px;" /></p> <p>This article explores the benefits and key features of threat modeling tools, highlighting their importance in enhancing security strategies and postures</p> Threat IntelligenceSecurityXPhttps://securityxp.com/articles/securing-the-clouds-the-top-10-cspm-tools-shaping-cloud-security/https://securityxp.com/articles/securing-the-clouds-the-top-10-cspm-tools-shaping-cloud-security/Cloud Security Posture Management (CSPM) tools detect misconfigurations and enforce compliance across cloud environments. Here are the top 10 CSPM tools for 2026.Sat, 13 Apr 2024 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/securing-the-clouds-the-top-10-cspm-tools-shaping-cloud-security.png" alt="Top 10 CSPM Tools Shaping Cloud Security in 2026" style="max-width: 100%; border-radius: 8px;" /></p> <p>Cloud Security Posture Management (CSPM) tools detect misconfigurations and enforce compliance across cloud environments. Here are the top 10 CSPM tools for 2026.</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/enhancing-iso-27001-compliance-with-penetration-testing/https://securityxp.com/articles/enhancing-iso-27001-compliance-with-penetration-testing/Penetration testing boosts ISO 27001 ROI by identifying critical vulnerabilities, reducing breach costs, and streamlining compliance, leading to enhanced security and stakeholder trustThu, 22 Feb 2024 09:17:00 GMT <p><img src="https://securityxp.com/uploads/heroes/enhancing-iso-27001-compliance-with-penetration-testing.png" alt="Enhancing ISO 27001 Compliance with Penetration Testing" style="max-width: 100%; border-radius: 8px;" /></p> <p>Penetration testing boosts ISO 27001 ROI by identifying critical vulnerabilities, reducing breach costs, and streamlining compliance, leading to enhanced security and stakeholder trust</p> Threat IntelligenceSecurityXPhttps://securityxp.com/articles/threat-modeling-essentials-for-enhanced-security/https://securityxp.com/articles/threat-modeling-essentials-for-enhanced-security/Threat modeling is a critical process for identifying and mitigating potential security threats in software development, and its integration into the Secure-by-Design approach can significantly enhance an organization's defense against cyber threatsSat, 06 Jan 2024 09:27:00 GMT <p><img src="https://securityxp.com/uploads/heroes/threat-modeling-essentials-for-enhanced-security.png" alt="Threat Modeling Essentials for Enhanced Security" style="max-width: 100%; border-radius: 8px;" /></p> <p>Threat modeling is a critical process for identifying and mitigating potential security threats in software development, and its integration into the Secure-by-Design approach can significantly enhance an organization's defense against cyber threats</p> Threat IntelligenceSecurityXPhttps://securityxp.com/articles/mitre-attck-version-14/https://securityxp.com/articles/mitre-attck-version-14/I. Introduction: Importance of staying updated with frameworks like MITRE ATT&CK In the realm of offensive security, staying updated with frameworks like MITRE ATT&CK is pivotal. It provides a stru...Sat, 04 Nov 2023 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/mitre-attck-version-14.png" alt="MITRE ATT&CK version 14" style="max-width: 100%; border-radius: 8px;" /></p> <p>I. Introduction: Importance of staying updated with frameworks like MITRE ATT&CK In the realm of offensive security, staying updated with frameworks like MITRE ATT&CK is pivotal. It provides a stru...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/optimizing-security-with-opswat-solutions/https://securityxp.com/articles/optimizing-security-with-opswat-solutions/OPSWAT provides advanced cybersecurity solutions that help organizations optimize security measures.Mon, 15 May 2023 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/optimizing-security-with-opswat-solutions.png" alt="Optimizing Security with OPSWAT Solutions" style="max-width: 100%; border-radius: 8px;" /></p> <p>OPSWAT provides advanced cybersecurity solutions that help organizations optimize security measures.</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/leading-vulnerability-scanners-benefits-and-use-cases/https://securityxp.com/articles/leading-vulnerability-scanners-benefits-and-use-cases/Leading vulnerability scanners provide comprehensive security assessment and management capabilities, allowing organizations to identify and remediate potential vulnerabilities in their IT infrastructure. From real-time scanning to automated reporting, these tools offer a range of benefits and use cases, helping businesses to mitigate risks, meet compliance requirements, and enhance overall security posture.Sun, 14 May 2023 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/leading-vulnerability-scanners-benefits-and-use-cases.png" alt="Leading Vulnerability Scanners: Benefits & Uses" style="max-width: 100%; border-radius: 8px;" /></p> <p>Leading vulnerability scanners provide comprehensive security assessment and management capabilities, allowing organizations to identify and remediate potential vulnerabilities in their IT infrastructure. From real-time scanning to automated reporting, these tools offer a range of benefits and use cases, helping businesses to mitigate risks, meet compliance requirements, and enhance overall security posture.</p> Vulnerabilities & ExploitsSecurityXP Editorial Deskhttps://securityxp.com/articles/centralized-log-management-siem-solutions-benefits-top-picks/https://securityxp.com/articles/centralized-log-management-siem-solutions-benefits-top-picks/Centralized Log Management & SIEM Solutions: Benefits & Top Picks Centralized log management and SIEM solutions are crucial components of modern IT security infrastructure. They allow businesses to monitor and analyze network activity, detect potential threats, and respond to incidents in real-time. In this article, we’ll explore the benefits of centralized log management and SIEM solutions, and recommend some of the top picks in the market.Sat, 13 May 2023 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/centralized-log-management-siem-solutions-benefits-top-picks.png" alt="Centralized Log Management & SIEM: Top Picks" style="max-width: 100%; border-radius: 8px;" /></p> <p>Centralized Log Management & SIEM Solutions: Benefits & Top Picks Centralized log management and SIEM solutions are crucial components of modern IT security infrastructure. They allow businesses to monitor and analyze network activity, detect potential threats, and respond to incidents in real-time. In this article, we’ll explore the benefits of centralized log management and SIEM solutions, and recommend some of the top picks in the market.</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/devsecops-advantages-of-multi-level-application-security-testing/https://securityxp.com/articles/devsecops-advantages-of-multi-level-application-security-testing/DevsecOps: Multi-Level App Security Testing DevsecOps, an evolution of DevOps, introduces security teams early in the development cycle. This approach enables continuous application security testing across multiple levels, providing a comprehensive security posture. With DevsecOps, organizations can leverage automation, collaboration, and continuous feedback, reducing the time to detect and remediate vulnerabilities.Fri, 12 May 2023 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/devsecops-advantages-of-multi-level-application-security-testing.png" alt="DevSecOps: Multi-Level App Security Testing" style="max-width: 100%; border-radius: 8px;" /></p> <p>DevsecOps: Multi-Level App Security Testing DevsecOps, an evolution of DevOps, introduces security teams early in the development cycle. This approach enables continuous application security testing across multiple levels, providing a comprehensive security posture. With DevsecOps, organizations can leverage automation, collaboration, and continuous feedback, reducing the time to detect and remediate vulnerabilities.</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/optimizing-it-operations-with-top-cmdb-solutions/https://securityxp.com/articles/optimizing-it-operations-with-top-cmdb-solutions/A Configuration Management Database (CMDB) is a critical component of IT operations. It provides a central repository of an organization's IT assets and their relationships, enabling efficient management of IT infrastructure. Top CMDB solutions offer various features, including automated discovery, data reconciliation, and visualization, that help organizations optimize IT operations. By leveraging the capabilities of CMDB solutions, organizations can reduce the time and effort spent on managing IT assets, ensure compliance, and improve overall IT efficiency.Thu, 11 May 2023 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/optimizing-it-operations-with-top-cmdb-solutions.png" alt="Optimizing IT Operations with Top CMDB Solutions" style="max-width: 100%; border-radius: 8px;" /></p> <p>A Configuration Management Database (CMDB) is a critical component of IT operations. It provides a central repository of an organization's IT assets and their relationships, enabling efficient management of IT infrastructure. Top CMDB solutions offer various features, including automated discovery, data reconciliation, and visualization, that help organizations optimize IT operations. By leveraging the capabilities of CMDB solutions, organizations can reduce the time and effort spent on managing IT assets, ensure compliance, and improve overall IT efficiency.</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/mitre-attck-version-13/https://securityxp.com/articles/mitre-attck-version-13/MITRE ATT&CK version 13 has been recently launched, bringing some significant updates. These include: Key website enhancements Increased focus on cloud and Linux coverage More detailed det...Mon, 08 May 2023 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/mitre-attck-version-13.png" alt="MITRE ATT&amp;CK version 13" style="max-width: 100%; border-radius: 8px;" /></p> <p>MITRE ATT&CK version 13 has been recently launched, bringing some significant updates. These include: Key website enhancements Increased focus on cloud and Linux coverage More detailed det...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/leading-dlp-solutions-maximizing-data-protection/https://securityxp.com/articles/leading-dlp-solutions-maximizing-data-protection/As data breaches continue to rise, it's vital for organizations to implement and maintain effective Data Loss Prevention (DLP) solutions. Leading DLP solutions offer comprehensive protection by monitoring and controlling data flow, identifying sensitive information, and enforcing policies to prevent leaks. With the right implementation and configuration, businesses can maximize data protection and avoid costly and damaging breaches.Fri, 05 May 2023 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/leading-dlp-solutions-maximizing-data-protection.png" alt="Leading DLP Solutions: Maximizing Data Protection" style="max-width: 100%; border-radius: 8px;" /></p> <p>As data breaches continue to rise, it's vital for organizations to implement and maintain effective Data Loss Prevention (DLP) solutions. Leading DLP solutions offer comprehensive protection by monitoring and controlling data flow, identifying sensitive information, and enforcing policies to prevent leaks. With the right implementation and configuration, businesses can maximize data protection and avoid costly and damaging breaches.</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/maximizing-efficiency-top-mdm-solutions-benefits/https://securityxp.com/articles/maximizing-efficiency-top-mdm-solutions-benefits/Maximizing efficiency in today's business landscape requires powerful tools. MDM solutions provide the necessary capabilities to manage data and streamline operations. Read on to learn more about the top MDM solutions and the benefits they offer.Wed, 03 May 2023 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/maximizing-efficiency-top-mdm-solutions-benefits.png" alt="Top MDM Solutions: Efficiency & Benefits Guide" style="max-width: 100%; border-radius: 8px;" /></p> <p>Maximizing efficiency in today's business landscape requires powerful tools. MDM solutions provide the necessary capabilities to manage data and streamline operations. Read on to learn more about the top MDM solutions and the benefits they offer.</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/exploring-top-rasp-solutions-for-secure-web-applications/https://securityxp.com/articles/exploring-top-rasp-solutions-for-secure-web-applications/As web applications become increasingly complex, the need for robust security measures becomes all the more important. One key solution that is gaining in popularity is RASP, or Runtime Application Self-Protection. Here, we take a closer look at some of the top RASP solutions available today, and how they can help to safeguard your web applications against a range of threats.Mon, 01 May 2023 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/exploring-top-rasp-solutions-for-secure-web-applications.png" alt="Top RASP Solutions for Secure Web Applications" style="max-width: 100%; border-radius: 8px;" /></p> <p>As web applications become increasingly complex, the need for robust security measures becomes all the more important. One key solution that is gaining in popularity is RASP, or Runtime Application Self-Protection. Here, we take a closer look at some of the top RASP solutions available today, and how they can help to safeguard your web applications against a range of threats.</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/maximizing-online-security-top-dns-filtering-solutions/https://securityxp.com/articles/maximizing-online-security-top-dns-filtering-solutions/With the increasing number of cyber attacks, it has become crucial to prioritize online security. One of the most effective ways to do so is by implementing DNS filtering solutions. These solutions not only block malicious websites but also prevent data theft and malware attacks. In this article, we will be discussing the top DNS filtering solutions that can help maximize online security.Mon, 01 May 2023 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/maximizing-online-security-top-dns-filtering-solutions.png" alt="Top DNS Filtering Solutions for Online Security" style="max-width: 100%; border-radius: 8px;" /></p> <p>With the increasing number of cyber attacks, it has become crucial to prioritize online security. One of the most effective ways to do so is by implementing DNS filtering solutions. These solutions not only block malicious websites but also prevent data theft and malware attacks. In this article, we will be discussing the top DNS filtering solutions that can help maximize online security.</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/cisa-updates-best-practices-for-mitre-attck-mapping/https://securityxp.com/articles/cisa-updates-best-practices-for-mitre-attck-mapping/To protect networks and data, CISA believes that understanding the behavior of adversaries is crucial. The success of network defenders in detecting and mitigating cyberattacks depends on this unde...Sun, 26 Feb 2023 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/cisa-updates-best-practices-for-mitre-attck-mapping.png" alt="CISA Updates MITRE ATT&CK Mapping Best Practices" style="max-width: 100%; border-radius: 8px;" /></p> <p>To protect networks and data, CISA believes that understanding the behavior of adversaries is crucial. The success of network defenders in detecting and mitigating cyberattacks depends on this unde...</p> Compliance & PrivacySecurityXP Editorial Deskhttps://securityxp.com/articles/attck-v12-is-now-accessible-revisions-october-2022/https://securityxp.com/articles/attck-v12-is-now-accessible-revisions-october-2022/Updates to Techniques, Groups, and Software for Enterprise, Mobile, and ICS in the October 2022 (v12) ATT&CK release — including new ICS detections and Campaigns.Tue, 25 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/attck-v12-is-now-accessible-revisions-october-2022.png" alt="ATT&CK v12 is now accessible! Revisions – October 2022" style="max-width: 100%; border-radius: 8px;" /></p> <p>Updates to Techniques, Groups, and Software for Enterprise, Mobile, and ICS in the October 2022 (v12) ATT&CK release — including new ICS detections and Campaigns.</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/google-announcing-guac-a-great-pairing-with-slsa-and-sbom/https://securityxp.com/articles/google-announcing-guac-a-great-pairing-with-slsa-and-sbom/The industry is collectively aware of the importance of supply chain security. Recent events include a sharp increase in software supply chain attacks, a catastrophic severity and breadth Log4j vul...Thu, 20 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/google-announcing-guac-a-great-pairing-with-slsa-and-sbom.png" alt="Google Announces GUAC for SLSA & SBOM Pairing" style="max-width: 100%; border-radius: 8px;" /></p> <p>The industry is collectively aware of the importance of supply chain security. Recent events include a sharp increase in software supply chain attacks, a catastrophic severity and breadth Log4j vul...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/canarytokens-org-rapid-free-mass-detection/https://securityxp.com/articles/canarytokens-org-rapid-free-mass-detection/Introduction Web bugs, the transparent images that monitor email opening, are probably already familiar to you. They operate by inserting a special URL in the image tag of a page and keeping an eyWed, 19 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/canarytokens-org-rapid-free-mass-detection.png" alt="Canarytokens. org - Rapid, Free, Mass Detection" style="max-width: 100%; border-radius: 8px;" /></p> <p>Introduction Web bugs, the transparent images that monitor email opening, are probably already familiar to you. They operate by inserting a special URL in the image tag of a page and keeping an ey</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/critical-fortinet-auth-bypass-bug-has-an-exploit-available-apply-the-patch-now/https://securityxp.com/articles/critical-fortinet-auth-bypass-bug-has-an-exploit-available-apply-the-patch-now/A critical authentication bypass flaw affecting Fortinet's FortiOS, FortiProxy, and FortiSwitchManager appliances now has proof-of-concept exploit code available. Attackers can get around the authe...Tue, 18 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/critical-fortinet-auth-bypass-bug-has-an-exploit-available-apply-the-patch-now.png" alt="Critical Fortinet Auth Bypass: Exploit Available" style="max-width: 100%; border-radius: 8px;" /></p> <p>A critical authentication bypass flaw affecting Fortinet's FortiOS, FortiProxy, and FortiSwitchManager appliances now has proof-of-concept exploit code available. Attackers can get around the authe...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/micro-emulation-plans-by-mitre-engenuity/https://securityxp.com/articles/micro-emulation-plans-by-mitre-engenuity/An overview of MITRE Engenuity's Micro Emulation Plans: compact, focused adversary-emulation exercises that let defenders validate detections against specific behaviors.Tue, 18 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/micro-emulation-plans-by-mitre-engenuity.png" alt="Micro Emulation Plans by MITRE-Engenuity" style="max-width: 100%; border-radius: 8px;" /></p> <p>An overview of MITRE Engenuity's Micro Emulation Plans: compact, focused adversary-emulation exercises that let defenders validate detections against specific behaviors.</p> Compliance & PrivacySecurityXP Editorial Deskhttps://securityxp.com/articles/organizations-in-poland-and-ukraine-are-affected-by-the-new-prestige-ransomware/https://securityxp.com/articles/organizations-in-poland-and-ukraine-are-affected-by-the-new-prestige-ransomware/The Microsoft Threat Intelligence Center (MSTIC) has found evidence of a novel ransomware campaign using a hitherto unidentified ransomware payload that targets businesses in the logistics and tran...Tue, 18 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/organizations-in-poland-and-ukraine-are-affected-by-the-new-prestige-ransomware.png" alt=""Prestige" Ransomware Hits Poland and Ukraine" style="max-width: 100%; border-radius: 8px;" /></p> <p>The Microsoft Threat Intelligence Center (MSTIC) has found evidence of a novel ransomware campaign using a hitherto unidentified ransomware payload that targets businesses in the logistics and tran...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/cloud-web-application-and-api-protection-magic-quadrant/https://securityxp.com/articles/cloud-web-application-and-api-protection-magic-quadrant/The market for protecting cloud web applications and APIs is expanding quickly. You can use this Magic Quadrant to find cloud WAAP providers that provide simple controls and specialised defences ag...Mon, 17 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/cloud-web-application-and-api-protection-magic-quadrant.png" alt="Cloud WAAP Magic Quadrant: Leaders & Trends" style="max-width: 100%; border-radius: 8px;" /></p> <p>The market for protecting cloud web applications and APIs is expanding quickly. You can use this Magic Quadrant to find cloud WAAP providers that provide simple controls and specialised defences ag...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/serverless-top-security-best-practices/https://securityxp.com/articles/serverless-top-security-best-practices/Describe serverless. A cloud execution model is serverless computing. It enables users and developers to create and use applications and services without having to worry about servers. Applications...Mon, 17 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/serverless-top-security-best-practices.png" alt="Serverless Top security best practices" style="max-width: 100%; border-radius: 8px;" /></p> <p>Describe serverless. A cloud execution model is serverless computing. It enables users and developers to create and use applications and services without having to worry about servers. Applications...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/voice-of-the-customer-web-application-and-api-protection-gartner-peer-insights/https://securityxp.com/articles/voice-of-the-customer-web-application-and-api-protection-gartner-peer-insights/What is API and Web Application Protection? Web application and API protection (WAAP), according to Gartner, is the evolution of the web application firewall (WAF) market, which now includes four c...Sun, 16 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/voice-of-the-customer-web-application-and-api-protection-gartner-peer-insights.png" alt="Gartner Peer Insights: WAAP Voice of Customer" style="max-width: 100%; border-radius: 8px;" /></p> <p>What is API and Web Application Protection? Web application and API protection (WAAP), according to Gartner, is the evolution of the web application firewall (WAF) market, which now includes four c...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/mitre-attck-released-updates-in-apr-2022-with-additional-techniques-and-structuring/https://securityxp.com/articles/mitre-attck-released-updates-in-apr-2022-with-additional-techniques-and-structuring/The Techniques, Groups, and Software for Enterprise, Mobile, and ICS are updated in the April 2022 (v11) ATT&CK release. The most significant modifications are the reorganisation of Detections, whi...Fri, 14 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/mitre-attck-released-updates-in-apr-2022-with-additional-techniques-and-structuring.png" alt="MITRE ATT&CK April 2022 Update: New Techniques" style="max-width: 100%; border-radius: 8px;" /></p> <p>The Techniques, Groups, and Software for Enterprise, Mobile, and ICS are updated in the April 2022 (v11) ATT&CK release. The most significant modifications are the reorganisation of Detections, whi...</p> Compliance & PrivacySecurityXP Editorial Deskhttps://securityxp.com/articles/owasp-threat-dragon-open-source-threat-modeling-tool-from-owasp/https://securityxp.com/articles/owasp-threat-dragon-open-source-threat-modeling-tool-from-owasp/Threat modelling is regarded as a potent method for incorporating security into application design at an early stage of the secure development lifecycle. It is most effective when used for: ensurin...Fri, 14 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/owasp-threat-dragon-open-source-threat-modeling-tool-from-owasp.png" alt="OWASP Threat Dragon: Open-Source Threat Modeling" style="max-width: 100%; border-radius: 8px;" /></p> <p>Threat modelling is regarded as a potent method for incorporating security into application design at an early stage of the secure development lifecycle. It is most effective when used for: ensurin...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/the-microsoft-threat-modeling-tool-tmt/https://securityxp.com/articles/the-microsoft-threat-modeling-tool-tmt/A crucial component of the Microsoft Security Development Lifecycle is the Threat Modeling Tool (SDL). Early detection and mitigation of potential security issues, when they are still manageable an...Fri, 14 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/the-microsoft-threat-modeling-tool-tmt.png" alt="The Microsoft Threat Modeling Tool (TMT)" style="max-width: 100%; border-radius: 8px;" /></p> <p>A crucial component of the Microsoft Security Development Lifecycle is the Threat Modeling Tool (SDL). Early detection and mitigation of potential security issues, when they are still manageable an...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/iriusrisk-threat-modeling-for-security-and-development-teams/https://securityxp.com/articles/iriusrisk-threat-modeling-for-security-and-development-teams/Threat modelling: what is it? Basics of Threat Modeling Threat modeling's fundamental tenet is the identification, disclosure, and management of security flaws. This is accomplished by being aware ofThu, 13 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/iriusrisk-threat-modeling-for-security-and-development-teams.png" alt="IriusRisk Threat Modeling for Security Teams" style="max-width: 100%; border-radius: 8px;" /></p> <p>Threat modelling: what is it? Basics of Threat Modeling Threat modeling's fundamental tenet is the identification, disclosure, and management of security flaws. This is accomplished by being aware of</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/threat-modeling-choosing-the-right-method-for-your-business/https://securityxp.com/articles/threat-modeling-choosing-the-right-method-for-your-business/Why Threat Modeling Is Important and What It Is Identifying and evaluating threats that an attacker (threat) could exploit is done through the exercise of threat modelling. Consider a threat model ...Thu, 13 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/threat-modeling-choosing-the-right-method-for-your-business.png" alt="Threat Modeling: Choosing the Right Method" style="max-width: 100%; border-radius: 8px;" /></p> <p>Why Threat Modeling Is Important and What It Is Identifying and evaluating threats that an attacker (threat) could exploit is done through the exercise of threat modelling. Consider a threat model ...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/kenna-risk-based-vulnerability-management/https://securityxp.com/articles/kenna-risk-based-vulnerability-management/Why You Should Consider More Than CVSS As previously mentioned, one typical method of sorting and prioritising which vulnerabilities to fix first is patching vulnerabilities that have a CVSS score inWed, 12 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/kenna-risk-based-vulnerability-management.png" alt="Kenna: RISK-BASED VULNERABILITY MANAGEMENT" style="max-width: 100%; border-radius: 8px;" /></p> <p>Why You Should Consider More Than CVSS As previously mentioned, one typical method of sorting and prioritising which vulnerabilities to fix first is patching vulnerabilities that have a CVSS score in</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/a-holistic-performance-management-framework-for-implementing-cybersecurity-strategies-by-bcg-stc/https://securityxp.com/articles/a-holistic-performance-management-framework-for-implementing-cybersecurity-strategies-by-bcg-stc/The frequency and cost of cyberattacks is accelerating. Globally, the cost of cybercrime is estimated to have risen from $445B in 2015 to over $2.2 trillion today. The frequency and size of data br...Sat, 08 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/a-holistic-performance-management-framework-for-implementing-cybersecurity-strategies-by-bcg-stc.png" alt="BCG & STC: Cybersecurity Performance Framework" style="max-width: 100%; border-radius: 8px;" /></p> <p>The frequency and cost of cyberattacks is accelerating. Globally, the cost of cybercrime is estimated to have risen from $445B in 2015 to over $2.2 trillion today. The frequency and size of data br...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/best-cloud-saas-governance-practices-from-the-csa-cloud-security-alliance/https://securityxp.com/articles/best-cloud-saas-governance-practices-from-the-csa-cloud-security-alliance/Introduction Infrastructure as Service security is almost always the focus when discussing cloud security. platforms as a service (PaaS) and infrastructure as a service (IaaS). In spite of the fact...Sat, 08 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/best-cloud-saas-governance-practices-from-the-csa-cloud-security-alliance.png" alt="Best Cloud SaaS Governance Practices from CSA" style="max-width: 100%; border-radius: 8px;" /></p> <p>Introduction Infrastructure as Service security is almost always the focus when discussing cloud security. platforms as a service (PaaS) and infrastructure as a service (IaaS). In spite of the fact...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/security-and-privacy-capability-maturity-model-sp-cmm-by-scf-secure-and-privacy-by-design-principles-framework/https://securityxp.com/articles/security-and-privacy-capability-maturity-model-sp-cmm-by-scf-secure-and-privacy-by-design-principles-framework/The SP establishes 32 common-sense principles to guide the development and oversight of a modern security and privacy program. The SP is sourced from the Secure Controls Framework (SCF), which is a...Fri, 07 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/security-and-privacy-capability-maturity-model-sp-cmm-by-scf-secure-and-privacy-by-design-principles-framework.png" alt="SP-CMM: Security & Privacy Maturity Model by SCF" style="max-width: 100%; border-radius: 8px;" /></p> <p>The SP establishes 32 common-sense principles to guide the development and oversight of a modern security and privacy program. The SP is sourced from the Secure Controls Framework (SCF), which is a...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/campaigns-to-be-introduced-to-mitre-attck-v12/https://securityxp.com/articles/campaigns-to-be-introduced-to-mitre-attck-v12/Primary Articles [Published ](<https://medium.com/mitre-attack/introducing-attack-campaigns-6b15baa6cbb4)by Matt Malona In [ATT&CK 2022](<https://medium.com/mitre-attack/attack-2022-roadmap-cd5a1a3...Wed, 05 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/campaigns-to-be-introduced-to-mitre-attck-v12.png" alt="Campaigns to be Introduced to MITRE ATT&CK V12" style="max-width: 100%; border-radius: 8px;" /></p> <p>Primary Articles [Published ](<https://medium.com/mitre-attack/introducing-attack-campaigns-6b15baa6cbb4)by Matt Malona In [ATT&CK 2022](<https://medium.com/mitre-attack/attack-2022-roadmap-cd5a1a3...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/devsecops-is-not-just-a-technological-shift-it-is-also-a-cultural-one-according-to-tenable-cs-cloud-securitys-whitepaper-7-habits-of-highly-effective-devsecops-teams/https://securityxp.com/articles/devsecops-is-not-just-a-technological-shift-it-is-also-a-cultural-one-according-to-tenable-cs-cloud-securitys-whitepaper-7-habits-of-highly-effective-devsecops-teams/DecSecOps, which is typically viewed as an integrated team of development, operational, and security practitioners that can securely deliver innovation within a defined scope to market, is an ideal...Mon, 03 Oct 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/devsecops-is-not-just-a-technological-shift-it-is-also-a-cultural-one-according-to-tenable-cs-cloud-securitys-whitepaper-7-habits-of-highly-effective-devsecops-teams.png" alt="DevSecOps: Cultural Shift, Not Just Tech" style="max-width: 100%; border-radius: 8px;" /></p> <p>DecSecOps, which is typically viewed as an integrated team of development, operational, and security practitioners that can securely deliver innovation within a defined scope to market, is an ideal...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/a-cyberrisk-alliance-resource-mssp-alert-top-250-mssps-services-providers-2022-edition/https://securityxp.com/articles/a-cyberrisk-alliance-resource-mssp-alert-top-250-mssps-services-providers-2022-edition/A succinct summary The Top 250 MSSPs and associated survey respondents continue to expand more quickly than the managed security market as a whole. In fact, respondents to the survey anticipate tha...Tue, 20 Sep 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/a-cyberrisk-alliance-resource-mssp-alert-top-250-mssps-services-providers-2022-edition.png" alt="MSSP Alert Top 250 MSSPs 2022 Edition Released" style="max-width: 100%; border-radius: 8px;" /></p> <p>A succinct summary The Top 250 MSSPs and associated survey respondents continue to expand more quickly than the managed security market as a whole. In fact, respondents to the survey anticipate tha...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/threat-actors-gained-access-to-the-personal-data-of-tens-of-thousands-of-revolut-customers-as-a-result-of-a-cyberattack/https://securityxp.com/articles/threat-actors-gained-access-to-the-personal-data-of-tens-of-thousands-of-revolut-customers-as-a-result-of-a-cyberattack/Over the weekend, the financial technology company Revolut was the victim of a 'highly targeted' cyberattack in which threat actors gained access to the personal data of 0.16% of its users (approxi...Mon, 19 Sep 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/threat-actors-gained-access-to-the-personal-data-of-tens-of-thousands-of-revolut-customers-as-a-result-of-a-cyberattack.png" alt="Revolut Data Breach: Tens of Thousands Affected" style="max-width: 100%; border-radius: 8px;" /></p> <p>Over the weekend, the financial technology company Revolut was the victim of a 'highly targeted' cyberattack in which threat actors gained access to the personal data of 0.16% of its users (approxi...</p> Data BreachesSecurityXP Editorial Deskhttps://securityxp.com/articles/3500-for-starbucks-cofee-data-with-name-gender-dob-mobile-no-email-and-address/https://securityxp.com/articles/3500-for-starbucks-cofee-data-with-name-gender-dob-mobile-no-email-and-address/The Straits Times discovered that 330,000 Singaporean Starbucks customers' personal information had been compromised and sold on an online forum since September 10. On Friday, the coffee chain sent...Sat, 17 Sep 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/3500-for-starbucks-cofee-data-with-name-gender-dob-mobile-no-email-and-address.png" alt="$3,500 for Starbucks Data with PII for Sale" style="max-width: 100%; border-radius: 8px;" /></p> <p>The Straits Times discovered that 330,000 Singaporean Starbucks customers' personal information had been compromised and sold on an online forum since September 10. On Friday, the coffee chain sent...</p> Data BreachesSecurityXP Editorial Deskhttps://securityxp.com/articles/bark-a-powershell-script-was-created-to-aid-the-bloodhound-enterprise-team-in-locating-and-regularly-validating-abuse-primitives/https://securityxp.com/articles/bark-a-powershell-script-was-created-to-aid-the-bloodhound-enterprise-team-in-locating-and-regularly-validating-abuse-primitives/BloodHound Attack Research Kit is referred to as BARK. It is a PowerShell script created to help the BloodHound Enterprise team find and keep track of abuse primitives. At the moment, BARK is conce...Sat, 17 Sep 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/bark-a-powershell-script-was-created-to-aid-the-bloodhound-enterprise-team-in-locating-and-regularly-validating-abuse-primitives.png" alt="BARK: BloodHound Abuse Validator" style="max-width: 100%; border-radius: 8px;" /></p> <p>BloodHound Attack Research Kit is referred to as BARK. It is a PowerShell script created to help the BloodHound Enterprise team find and keep track of abuse primitives. At the moment, BARK is conce...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/beta-mobile-sub-techniques-structured-detections-and-ics-join-the-band-as-attck-upgrades-to-version-11/https://securityxp.com/articles/beta-mobile-sub-techniques-structured-detections-and-ics-join-the-band-as-attck-upgrades-to-version-11/The most recent ATT&CK release is now available, and this time They have upgraded to version 11! There shouldn't be any major surprises if you've been following their roadmap, but they wanted to ta...Sat, 17 Sep 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/beta-mobile-sub-techniques-structured-detections-and-ics-join-the-band-as-attck-upgrades-to-version-11.png" alt="ATT&CK v11 Adds Mobile Sub-Techniques & ICS" style="max-width: 100%; border-radius: 8px;" /></p> <p>The most recent ATT&CK release is now available, and this time They have upgraded to version 11! There shouldn't be any major surprises if you've been following their roadmap, but they wanted to ta...</p> Compliance & PrivacySecurityXP Editorial Deskhttps://securityxp.com/articles/the-azure-threat-research-matrix-is-explained/https://securityxp.com/articles/the-azure-threat-research-matrix-is-explained/It's typical for the assessment team to cite the MITRE ATT&CK knowledge base when conducting an offensive security assessment so that high-level stakeholders can see visually which techniques were ...Sat, 17 Sep 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/the-azure-threat-research-matrix-is-explained.png" alt="The Azure Threat Research Matrix is explained" style="max-width: 100%; border-radius: 8px;" /></p> <p>It's typical for the assessment team to cite the MITRE ATT&CK knowledge base when conducting an offensive security assessment so that high-level stakeholders can see visually which techniques were ...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/uber-employees-believed-the-alleged-teen-hacker-attack-was-a-joke/https://securityxp.com/articles/uber-employees-believed-the-alleged-teen-hacker-attack-was-a-joke/The world's largest ride-hailing company, Uber, shut down a portion of its operations late on Thursday after learning that its internal systems had been compromised. According to the company, the a...Fri, 16 Sep 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/uber-employees-believed-the-alleged-teen-hacker-attack-was-a-joke.png" alt="Uber Staff Dismissed Teen Hacker Attack as a Joke" style="max-width: 100%; border-radius: 8px;" /></p> <p>The world's largest ride-hailing company, Uber, shut down a portion of its operations late on Thursday after learning that its internal systems had been compromised. According to the company, the a...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/dufflebag/https://securityxp.com/articles/dufflebag/A tool called [Dufflebag ](<https://github.com/bishopfox/dufflebag)developed by [dan-bishopfox Dan Petro](<https://github.com/dan-bishopfox) and [bmoar Ben Morris](<https://github.com/bmoarSat, 10 Sep 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/dufflebag.png" alt="Dufflebag" style="max-width: 100%; border-radius: 8px;" /></p> <p>A tool called [Dufflebag ](<https://github.com/bishopfox/dufflebag)developed by [dan-bishopfox Dan Petro](<https://github.com/dan-bishopfox) and [bmoar Ben Morris](<https://github.com/bmoar</p> Vulnerabilities & ExploitsSecurityXP Editorial Deskhttps://securityxp.com/articles/portuguese-nato-documents-discovered-for-sale-online/https://securityxp.com/articles/portuguese-nato-documents-discovered-for-sale-online/The National Security Office is still determining the extent of the damage, but EMGFA, secret military, and MDN computers are suspected of being involved in the security lapse that made it possible...Fri, 09 Sep 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/portuguese-nato-documents-discovered-for-sale-online.png" alt="Portuguese NATO Documents Found for Sale Online" style="max-width: 100%; border-radius: 8px;" /></p> <p>The National Security Office is still determining the extent of the damage, but EMGFA, secret military, and MDN computers are suspected of being involved in the security lapse that made it possible...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/a-significant-data-breach-on-the-streaming-service-brand-new-tube-exposed-users-names-and-ip-addresses/https://securityxp.com/articles/a-significant-data-breach-on-the-streaming-service-brand-new-tube-exposed-users-names-and-ip-addresses/A significant security flaw has been discovered on [BrandNewTube](<https://onevsp.com/), a YouTube alternative that was founded in the UK. Several users who received an email that revealed theiThu, 08 Sep 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/a-significant-data-breach-on-the-streaming-service-brand-new-tube-exposed-users-names-and-ip-addresses.png" alt="Brand New Tube Data Breach Exposes User IPs" style="max-width: 100%; border-radius: 8px;" /></p> <p>A significant security flaw has been discovered on [BrandNewTube](<https://onevsp.com/), a YouTube alternative that was founded in the UK. Several users who received an email that revealed thei</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/a-successful-threat-hunting-programs-foundation/https://securityxp.com/articles/a-successful-threat-hunting-programs-foundation/'Threat hunting is the practice of proactively searching for cyber threats that are lurking undetected in a network. Cyber threat hunting digs deep to find malicious actors in your environment thaWed, 07 Sep 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/a-successful-threat-hunting-programs-foundation.png" alt="A Successful Threat-Hunting Program's Foundation" style="max-width: 100%; border-radius: 8px;" /></p> <p>'Threat hunting is the practice of proactively searching for cyber threats that are lurking undetected in a network. Cyber threat hunting digs deep to find malicious actors in your environment tha</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/feds-and-npm-give-advice-on-supply-chain-security-to-prevent-another-solarwinds-incident/https://securityxp.com/articles/feds-and-npm-give-advice-on-supply-chain-security-to-prevent-another-solarwinds-incident/Faster development times, innovation, and a thriving open-source community have all been made possible by the ability to use another developer's project as a dependency. With many JavaScript projectsTue, 06 Sep 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/feds-and-npm-give-advice-on-supply-chain-security-to-prevent-another-solarwinds-incident.png" alt="Feds & npm Issue Supply Chain Security Guidance" style="max-width: 100%; border-radius: 8px;" /></p> <p>Faster development times, innovation, and a thriving open-source community have all been made possible by the ability to use another developer's project as a dependency. With many JavaScript projects</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/change-your-tiktok-password-immediately-in-case-of-a-massive-data-leak/https://securityxp.com/articles/change-your-tiktok-password-immediately-in-case-of-a-massive-data-leak/There's a post from 12 hours ago on a well-known hacking forum making some pretty significant claims, with the disclaimer that everything is 'alleged' at this point: 'We don't know why it's there o...Mon, 05 Sep 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/change-your-tiktok-password-immediately-in-case-of-a-massive-data-leak.png" alt="Change Your TikTok Password Now: Data Leak Risk" style="max-width: 100%; border-radius: 8px;" /></p> <p>There's a post from 12 hours ago on a well-known hacking forum making some pretty significant claims, with the disclaimer that everything is 'alleged' at this point: 'We don't know why it's there o...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/nato-examines-data-breach-from-missile-vendor-on-the-dark-web/https://securityxp.com/articles/nato-examines-data-breach-from-missile-vendor-on-the-dark-web/One set of documents purportedly belonging to an EU defense supplier includes information on the weapons Ukraine used to fight Russia. According to a report in the media, NATO is looking into the l...Sun, 04 Sep 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/nato-examines-data-breach-from-missile-vendor-on-the-dark-web.png" alt="NATO Probes Missile Vendor Breach on Dark Web" style="max-width: 100%; border-radius: 8px;" /></p> <p>One set of documents purportedly belonging to an EU defense supplier includes information on the weapons Ukraine used to fight Russia. According to a report in the media, NATO is looking into the l...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/drdo-and-iit-delhi-scientists-demonstrate-quantum-key-distribution-qkd-between-two-cities-100-kilometres-apart/https://securityxp.com/articles/drdo-and-iit-delhi-scientists-demonstrate-quantum-key-distribution-qkd-between-two-cities-100-kilometres-apart/For the first time in the country, a team of scientists from the Defence Research and Development Organisation (DRDO) and the Indian Institute of Technology (IIT) Delhi successfully demonstrated a ...Fri, 25 Feb 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/drdo-and-iit-delhi-scientists-demonstrate-quantum-key-distribution-qkd-between-two-cities-100-kilometres-apart.png" alt="DRDO & IIT Delhi Demo 100km QKD" style="max-width: 100%; border-radius: 8px;" /></p> <p>For the first time in the country, a team of scientists from the Defence Research and Development Organisation (DRDO) and the Indian Institute of Technology (IIT) Delhi successfully demonstrated a ...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/indian-organizations-also-targetted-by-bvp47-backdoor-of-us-nsa-equation-group/https://securityxp.com/articles/indian-organizations-also-targetted-by-bvp47-backdoor-of-us-nsa-equation-group/Banaras Hindu University, India Education Network, Eureka Technology Partners, Indian Academy of Sciences, Indian Institute of Tropical Meteorology, Council of Scientific & Industrial Research (CSIR)Thu, 24 Feb 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/indian-organizations-also-targetted-by-bvp47-backdoor-of-us-nsa-equation-group.png" alt="Bvp47 Backdoor: Indian Orgs Targeted by NSA Tool" style="max-width: 100%; border-radius: 8px;" /></p> <p>Banaras Hindu University, India Education Network, Eureka Technology Partners, Indian Academy of Sciences, Indian Institute of Tropical Meteorology, Council of Scientific & Industrial Research (CSIR)</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/free-cybersecurity-services-and-tools-released-by-cisa/https://securityxp.com/articles/free-cybersecurity-services-and-tools-released-by-cisa/CISA has collected a list of free cybersecurity tools and services to help companies advance their security capabilities as part of our ongoing objective to minimise cybersecurity risk among U.S. c...Wed, 23 Feb 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/free-cybersecurity-services-and-tools-released-by-cisa.png" alt="Free Cybersecurity Tools & Services from CISA" style="max-width: 100%; border-radius: 8px;" /></p> <p>CISA has collected a list of free cybersecurity tools and services to help companies advance their security capabilities as part of our ongoing objective to minimise cybersecurity risk among U.S. c...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/phishing-and-malware-by-numbers-in-the-threat-report-portugal-q3-2021/https://securityxp.com/articles/phishing-and-malware-by-numbers-in-the-threat-report-portugal-q3-2021/Segurança-Informática developed and maintains the Portuguese Abuse Open Feed 0xSI f33d, an open sharing database with the potential to collect indicators from numerous sources. This feed is provide...Wed, 23 Feb 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/phishing-and-malware-by-numbers-in-the-threat-report-portugal-q3-2021.png" alt="Portugal Q3 2021 Threat Report: Key Malware Stats" style="max-width: 100%; border-radius: 8px;" /></p> <p>Segurança-Informática developed and maintains the Portuguese Abuse Open Feed 0xSI f33d, an open sharing database with the potential to collect indicators from numerous sources. This feed is provide...</p> Malware & RansomwareSecurityXP Editorial Deskhttps://securityxp.com/articles/cybersecurity-risks-of-russia-ukraine-conflict-escalation/https://securityxp.com/articles/cybersecurity-risks-of-russia-ukraine-conflict-escalation/DDoS attacks on Ukrainian groups were promptly traced to Russian intelligence by the UK and US governments last week. The intrusions on February 15 and 16 were 'very certain' the work of the Russia...Tue, 22 Feb 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/cybersecurity-risks-of-russia-ukraine-conflict-escalation.png" alt="Cybersecurity Risks of Russia-Ukraine Escalation" style="max-width: 100%; border-radius: 8px;" /></p> <p>DDoS attacks on Ukrainian groups were promptly traced to Russian intelligence by the UK and US governments last week. The intrusions on February 15 and 16 were 'very certain' the work of the Russia...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/payout-for-zero-click-outlook-zero-days-has-been-increased-to-400000-by-zerodium/https://securityxp.com/articles/payout-for-zero-click-outlook-zero-days-has-been-increased-to-400000-by-zerodium/It was announced on the same day that Trustwave SpiderLabs revealed a new approach to get around Outlook security and send malicious links to victims. was reported by [threatpost](<https://threatpo...Fri, 28 Jan 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/payout-for-zero-click-outlook-zero-days-has-been-increased-to-400000-by-zerodium.png" alt="Zerodium Raises Outlook Zero-Day Payout to $400K" style="max-width: 100%; border-radius: 8px;" /></p> <p>It was announced on the same day that Trustwave SpiderLabs revealed a new approach to get around Outlook security and send malicious links to victims. was reported by [threatpost](<https://threatpo...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/joint-action-by-10-countries-and-europol-taken-down-vpnlabs-secure-communication-tool-favored-by-cybercriminals/https://securityxp.com/articles/joint-action-by-10-countries-and-europol-taken-down-vpnlabs-secure-communication-tool-favored-by-cybercriminals/Joint action by 10 countries and Europol taken down VPNLabs secure communication tool favored by cybercriminals This week, law enforcement officials targeted VPNLab.net's users and infrastructure i...Tue, 18 Jan 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/joint-action-by-10-countries-and-europol-taken-down-vpnlabs-secure-communication-tool-favored-by-cybercriminals.png" alt="VPNLabs Takedown by 10 Countries & Europol" style="max-width: 100%; border-radius: 8px;" /></p> <p>Joint action by 10 countries and Europol taken down VPNLabs secure communication tool favored by cybercriminals This week, law enforcement officials targeted VPNLab.net's users and infrastructure i...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/russia-arrests-members-of-revil-hacking-group-at-u-s-request-fsb/https://securityxp.com/articles/russia-arrests-members-of-revil-hacking-group-at-u-s-request-fsb/In Russia, the cities of Moscow, St. Petersburg, Moscow, Leningrad, and Lipetsk, the Russian Federation's Federal Security Service, in collaboration with the Ministry of Internal Affairs' Investiga...Tue, 18 Jan 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/russia-arrests-members-of-revil-hacking-group-at-u-s-request-fsb.png" alt="Russia Arrests REvil Hackers at U.S. Request" style="max-width: 100%; border-radius: 8px;" /></p> <p>In Russia, the cities of Moscow, St. Petersburg, Moscow, Leningrad, and Lipetsk, the Russian Federation's Federal Security Service, in collaboration with the Ministry of Internal Affairs' Investiga...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/mitre-attck-released-updates-in-oct-2021-with-additional-techniques-and-structuring/https://securityxp.com/articles/mitre-attck-released-updates-in-oct-2021-with-additional-techniques-and-structuring/MITRE ATT&CK® is a globally accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of ...Sun, 16 Jan 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/mitre-attck-released-updates-in-oct-2021-with-additional-techniques-and-structuring.png" alt="MITRE ATT&CK October 2021 Update: New Techniques" style="max-width: 100%; border-radius: 8px;" /></p> <p>MITRE ATT&CK® is a globally accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of ...</p> Vulnerabilities & ExploitsSecurityXP Editorial Deskhttps://securityxp.com/articles/russian-hackers-infiltrate-exams-of-indian-navy-and-air-force/https://securityxp.com/articles/russian-hackers-infiltrate-exams-of-indian-navy-and-air-force/The Delhi Police’s has busted attempts of Russian hackers to infiltrate the Indian Navy and Air Force exams through the dark web. The Intelligence Department of Delhi Police were the ones who broughtWed, 12 Jan 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/russian-hackers-infiltrate-exams-of-indian-navy-and-air-force.png" alt="Russian Hackers Infiltrate Indian Military Exams" style="max-width: 100%; border-radius: 8px;" /></p> <p>The Delhi Police’s has busted attempts of Russian hackers to infiltrate the Indian Navy and Air Force exams through the dark web. The Intelligence Department of Delhi Police were the ones who brought</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/alexa-ai-attempts-to-murder-a-child/https://securityxp.com/articles/alexa-ai-attempts-to-murder-a-child/Amazon Alexa, also known simply as Alexa, is a virtual assistant technology largely based on a Polish speech synthesizer named Ivona, bought by Amazon in 2013. It was first used in the Amazon Echo ...Sun, 09 Jan 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/alexa-ai-attempts-to-murder-a-child.png" alt="Alexa AI Attempts to murder a child" style="max-width: 100%; border-radius: 8px;" /></p> <p>Amazon Alexa, also known simply as Alexa, is a virtual assistant technology largely based on a Polish speech synthesizer named Ivona, bought by Amazon in 2013. It was first used in the Amazon Echo ...</p> AI/ML SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/france-gonna-earn-210-million-euro-from-cookies-of-facebook-and-google/https://securityxp.com/articles/france-gonna-earn-210-million-euro-from-cookies-of-facebook-and-google/Cookie Consent [Dark Pattern](<https://www.deceptive.design/types): Privacy Zuckering In a NutShell 'Following investigations, the CNIL noted that the websites facebook.com, google.fFri, 07 Jan 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/france-gonna-earn-210-million-euro-from-cookies-of-facebook-and-google.png" alt="France Fines Facebook & Google €210M for Cookies" style="max-width: 100%; border-radius: 8px;" /></p> <p>Cookie Consent [Dark Pattern](<https://www.deceptive.design/types): Privacy Zuckering In a NutShell 'Following investigations, the CNIL noted that the websites facebook.com, google.f</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/gartner-edrs-are-not-perfect-fail-against-common-attacks/https://securityxp.com/articles/gartner-edrs-are-not-perfect-fail-against-common-attacks/A study testing endpoint detection and response (EDR) products from 18 vendors finds state-of-the-art EDRs fail to prevent or log the bulk of common attacks.Tue, 04 Jan 2022 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/gartner-edrs-are-not-perfect-fail-against-common-attacks.png" alt="Gartner EDRs are not perfect, fail against common attacks" style="max-width: 100%; border-radius: 8px;" /></p> <p>A study testing endpoint detection and response (EDR) products from 18 vendors finds state-of-the-art EDRs fail to prevent or log the bulk of common attacks.</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/useful-pentesting-resources/https://securityxp.com/articles/useful-pentesting-resources/A curated list of useful penetration testing resources, tools, and references for security professionals.Tue, 07 Sep 2021 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/useful-pentesting-resources.png" alt="Useful Pentesting Resources" style="max-width: 100%; border-radius: 8px;" /></p> <p>A curated list of useful penetration testing resources, tools, and references for security professionals.</p> Vulnerabilities & ExploitsSecurityXP Editorial Deskhttps://securityxp.com/articles/mitre-attck-released-updates-in-april-2021-with-additional-techniques-and-structuring/https://securityxp.com/articles/mitre-attck-released-updates-in-april-2021-with-additional-techniques-and-structuring/MITRE ATT&CK® is a globally accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of ...Sun, 04 Jul 2021 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/mitre-attck-released-updates-in-april-2021-with-additional-techniques-and-structuring.png" alt="MITRE ATT&CK April 2021 Update: New Techniques" style="max-width: 100%; border-radius: 8px;" /></p> <p>MITRE ATT&CK® is a globally accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of ...</p> Vulnerabilities & ExploitsSecurityXP Editorial Deskhttps://securityxp.com/articles/nsa-released-d3fend-a-framework-for-cybersecurity-professionals-to-tailor-defenses/https://securityxp.com/articles/nsa-released-d3fend-a-framework-for-cybersecurity-professionals-to-tailor-defenses/Recently a Framework was Released by NSA named D3FEND which is based on and Complementary to MITRE ATT&CK Framework. It gave a Technical Knowledge base to create Defensive Countermeasure against Co...Sun, 04 Jul 2021 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/nsa-released-d3fend-a-framework-for-cybersecurity-professionals-to-tailor-defenses.png" alt="NSA Releases D3FEND Framework for Cyber Defenses" style="max-width: 100%; border-radius: 8px;" /></p> <p>Recently a Framework was Released by NSA named D3FEND which is based on and Complementary to MITRE ATT&CK Framework. It gave a Technical Knowledge base to create Defensive Countermeasure against Co...</p> Cloud SecuritySecurityXP Editorial Deskhttps://securityxp.com/articles/bharat-ranked-in-tier-3-of-iiss-cyber-capabilities-and-national-power-a-net-assessment/https://securityxp.com/articles/bharat-ranked-in-tier-3-of-iiss-cyber-capabilities-and-national-power-a-net-assessment/As a result of a Study conducted by IISS Researchers in the last two years, Bharat was ranked in Tier 3, it is to be noted that the US is the only nation in Tier one. Instead of Going the traditionalSat, 03 Jul 2021 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/bharat-ranked-in-tier-3-of-iiss-cyber-capabilities-and-national-power-a-net-assessment.png" alt="India Ranked Tier 3 in IISS Cyber Capabilities" style="max-width: 100%; border-radius: 8px;" /></p> <p>As a result of a Study conducted by IISS Researchers in the last two years, Bharat was ranked in Tier 3, it is to be noted that the US is the only nation in Tier one. Instead of Going the traditional</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/penetration-testing-attack-infrastructure/https://securityxp.com/articles/penetration-testing-attack-infrastructure/A practical guide to planning and building penetration-testing attack infrastructure — covering C2, recon, social engineering, weaponization, and initial access.Sat, 03 Jul 2021 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/penetration-testing-attack-infrastructure.png" alt="Penetration testing Attack Infrastructure" style="max-width: 100%; border-radius: 8px;" /></p> <p>A practical guide to planning and building penetration-testing attack infrastructure — covering C2, recon, social engineering, weaponization, and initial access.</p> Vulnerabilities & ExploitsSecurityXP Editorial Deskhttps://securityxp.com/articles/next-gen-missile-data-hacked-in-japan-report-says/https://securityxp.com/articles/next-gen-missile-data-hacked-in-japan-report-says/The Japanese Defense Ministry is investigating a possible leak of details of a new state-of-the-art missile in a large-scale cyberattack on Mitsubishi Electric Corp, the Asahi Shimbun newspaper rep...Thu, 21 May 2020 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/next-gen-missile-data-hacked-in-japan-report-says.png" alt="Next-Gen Missile Data Hacked in Japan: Report" style="max-width: 100%; border-radius: 8px;" /></p> <p>The Japanese Defense Ministry is investigating a possible leak of details of a new state-of-the-art missile in a large-scale cyberattack on Mitsubishi Electric Corp, the Asahi Shimbun newspaper rep...</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/bias-bluetooth-impersonation-attacks/https://securityxp.com/articles/bias-bluetooth-impersonation-attacks/[Daniele Antonioli](<https://francozappa.github.io/about-bias/authors/francozappa/) (Postdoc at the EPFL Cyber-Physical Systems Security, Network Security, Wireless Security, Embedded Systems SecuritWed, 20 May 2020 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/bias-bluetooth-impersonation-attacks.png" alt="BIAS: Bluetooth Impersonation AttackS" style="max-width: 100%; border-radius: 8px;" /></p> <p>[Daniele Antonioli](<https://francozappa.github.io/about-bias/authors/francozappa/) (Postdoc at the EPFL Cyber-Physical Systems Security, Network Security, Wireless Security, Embedded Systems Securit</p> Threat IntelligenceSecurityXP Editorial Deskhttps://securityxp.com/articles/huawei-dev-team-buggy-hksp-patch-with-backdoor-and-linux-foundation/https://securityxp.com/articles/huawei-dev-team-buggy-hksp-patch-with-backdoor-and-linux-foundation/Last week the Huawei development team submitted a patch to the Linux Foundation with a ‘trivial vulnerability.’ When the vulnerability was discovered, Huawei denied its involvement in the patch and...Mon, 18 May 2020 00:00:00 GMT <p><img src="https://securityxp.com/uploads/heroes/huawei-dev-team-buggy-hksp-patch-with-backdoor-and-linux-foundation.png" alt="Huawei HKSP Patch Buggy With Backdoor, Says LKF" style="max-width: 100%; border-radius: 8px;" /></p> <p>Last week the Huawei development team submitted a patch to the Linux Foundation with a ‘trivial vulnerability.’ When the vulnerability was discovered, Huawei denied its involvement in the patch and...</p> Vulnerabilities & ExploitsSecurityXP Editorial Desk