[HIGH] – Check Point Issues Patches for Two Critical VPN Certificate Flaws
Check Point released fixes for two CVSS 9.8 VPN certificate flaws that may permit unauthenticated remote code execution.
[HIGH] – Android September Updates Address 180 Vulnerabilities
Android's September updates address 180 vulnerabilities, including critical System-component issues that may allow remote code execution.
[HIGH] – Berlin Investigates Newly Published Credentials and Government-Breach Data
Berlin says newly released breach data includes login credentials; officials are assessing affected systems and people.
[HIGH] – VMware Workstation and Fusion Host-Execution Flaws Patched
Broadcom patched VMware flaws that can let a guest VM administrator execute code on the host.
[HIGH] – Boston Scientific Reports Recovery Progress After Cybersecurity Incident
Boston Scientific reports recovery progress and no new unauthorized activity after its August cybersecurity incident.
[HIGH] – JetBrains Cadence Incident Prompts Credential Rotation
JetBrains tells Cadence users to rotate credentials after a TeamCity-linked security incident.
Innovator Spotlight: Morphisec
Innovator Spotlight: Morphisec. The AI You Didn’t Approve Is Already Running In Your Environment Ask a security leader which AI vendors their organization has vetted, and most can produce a…
4 Steps for Making Sure Domain Impersonation Takedown Requests Dont Get Rejected
4 Steps for Making Sure Domain Impersonation Takedown Requests Don’t Get Rejected. Brand impersonation is one of the fastest growing threats facing organizations today. Bad actors create fake websites using…
The Art of Hunting Azure Cloud Secrets
The Art of Hunting Azure Cloud Secrets. The difference between a standard cloud test and a subscription takeover? Finding the right secrets. In this blog, we introduce two open-source tools…
Ghostjacking Attack Uses Poisoned Logs to Turn AI Agents Bad
‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad. An AI agent executes instructions that an attacker has planted in the log or alert that records a blocked request…