Collaborate Disseminate
Security teams are still catching malware. The problem is what they’re not catching.
More attacks today don’t arrive as files. They don’t drop binaries. They don’t trigger classic alerts. Instead, they run quietly through tools that already exist insid… Continue reading Webinar: Learn How AI-Powered Zero Trust Detects Attacks with No Files or Indicators
Open-source workflow automation platform n8n has warned of a maximum-severity security flaw that, if successfully exploited, could result in authenticated remote code execution (RCE).
The vulnerability, which has been assigned the CVE identifier CVE-20… Continue reading n8n Warns of CVSS 10.0 RCE Vulnerability Affecting Self-Hosted and Cloud Versions
Non-human employees are becoming the future of cybersecurity, and enterprises need to prepare accordingly. As organizations scale Artificial Intelligence (AI) and cloud automation, there is exponential growth in Non-Human Identities (NHIs), including b… Continue reading The Future of Cybersecurity Includes Non-Human Employees
Veeam has released security updates to address multiple flaws in its Backup & Replication software, including a “critical” issue that could result in remote code execution (RCE).
The vulnerability, tracked as CVE-2025-59470, carries a CVSS score of… Continue reading Veeam Patches Critical RCE Vulnerability with CVSS 9.0 in Backup & Replication
Threat actors engaging in phishing attacks are exploiting routing scenarios and misconfigured spoof protections to impersonate organizations’ domains and distribute emails that appear as if they have been sent internally.
“Threat actors have leveraged … Continue reading Microsoft Warns Misconfigured Email Routing Can Enable Internal Domain Phishing
A newly discovered critical security flaw in legacy D-Link DSL gateway routers has come under active exploitation in the wild.
The vulnerability, tracked as CVE-2026-0625 (CVSS score: 9.3), concerns a case of command injection in the “dnscfg.cgi” endpo… Continue reading Ongoing Attacks Exploiting Critical RCE Vulnerability in Legacy D-Link DSL Routers
Cybersecurity researchers have discovered two new malicious extensions on the Chrome Web Store that are designed to exfiltrate OpenAI ChatGPT and DeepSeek conversations alongside browsing data to servers under the attackers’ control.
The names of the e… Continue reading Two Chrome Extensions Caught Stealing ChatGPT and DeepSeek Chats from 900,000 Users
The CERT Coordination Center (CERT/CC) has disclosed details of an unpatched security flaw impacting TOTOLINK EX200 wireless range extender that could allow a remote authenticated attacker to gain full control of the device.
The flaw, CVE-2025-65606 (C… Continue reading Unpatched Firmware Flaw Exposes TOTOLINK EX200 to Full Remote Device Takeover
Source: Securonix
Cybersecurity researchers have disclosed details of a new campaign dubbed PHALT#BLYX that has leveraged ClickFix-style lures to display fixes for fake blue screen of death (BSoD) errors in attacks targeting the European hospitality se… Continue reading Fake Booking Emails Redirect Hotel Staff to Fake BSoD Pages Delivering DCRat
The Invisible Half of the Identity Universe
Identity used to live in one place – an LDAP directory, an HR system, a single IAM portal.
Not anymore. Today, identity is fragmented across SaaS, on-prem, IaaS, PaaS, home-grown, and shadow applications. Eac… Continue reading What is Identity Dark Matter?