Cybersecurity

AhsayCBS backup servers need a second patch after the first one fell short

AhsayCBS backup servers need a second patch after the first one fell short

Attackers have been planting web shells on AhsayCBS since October 7. Hotfix 10.3.4.45 is the one that counts....
SonicWall SMA1000 remote access boxes are being probed three days after the fix. Install the October hotfix

SonicWall SMA1000 remote access boxes are being probed three days after the fix. Install the October hotfix

A no-login bug rated 10.0 started drawing attack traffic on October 9. The fix needs a reboot....
Ransomware crews are logging in through GlobalProtect VPNs without passwords. Upgrade and reset sessions today

Ransomware crews are logging in through GlobalProtect VPNs without passwords. Upgrade and reset sessions today

Qilin and Settra are using a Palo Alto bug fixed in May, and their sessions look like your remote staff....
Why Just Checking the Box on Risk Assessment Isn’t Enough

Why Just Checking the Box on Risk Assessment Isn’t Enough

Passing an audit isn't the same as being secure. Learn why compliance-only risk assessments create false confidence and how to make them truly effective.
Cheapest Cybersecurity Certifications in 2026 (Verified Prices)

Cheapest Cybersecurity Certifications in 2026 (Verified Prices)

The cheapest cybersecurity certifications in 2026: U.S. exam prices checked Oct 8, 2026, renewal and annual fees, 3-year costs and which to pick.
Seven countries just warned that attackers are still hunting forgotten FTP, DNS and Struts servers — find yours this weekend

Seven countries just warned that attackers are still hunting forgotten FTP, DNS and Struts servers — find yours this weekend

Old FTP, DNS and Struts boxes nobody watches are how one China-linked group gets in. Then it reads your email....
Splunk search head clusters can be taken over without a login — upgrade to this week’s release or switch off the sidecar

Splunk search head clusters can be taken over without a login — upgrade to this week’s release or switch off the sidecar

A 9.8 bug lets anyone who can reach a 10.2 or 10.4 search head cluster member run commands. Not exploited…
Attackers are planting web shells through Bricksforge forms — update WordPress sites built on Bricks today

Attackers are planting web shells through Bricksforge forms — update WordPress sites built on Bricks today

Exploited since Wednesday evening, no login needed. Version 3.1.8.10 closes it....
Your internal dashboards were never meant to be public — JPCERT says attackers are finding them anyway

Your internal dashboards were never meant to be public — JPCERT says attackers are finding them anyway

BI tools and employee-only admin systems are behind a wave of data leaks. The fix starts with a list of…
Friday’s brief: forgotten servers on a seven-country advisory, then Splunk, Bricksforge and exposed dashboards

Friday’s brief: forgotten servers on a seven-country advisory, then Splunk, Bricksforge and exposed dashboards

One seven-country advisory about the servers you forgot, plus three fixes to finish before the weekend....
FortiBleed is still locking admins out of their own FortiGates — reset logins and lock down management today

FortiBleed is still locking admins out of their own FortiGates — reset logins and lock down management today

More than 86,000 FortiGates already taken with real passwords, and ransomware crews are buying the access. A firmware update won’t…
Before you book the Nexus upgrade, check which of Cisco’s four critical NX-OS advisories actually apply to your switches

Before you book the Nexus upgrade, check which of Cisco’s four critical NX-OS advisories actually apply to your switches

One batch hits every Nexus config. Three more only matter if NX-API, NGOAM or MPLS OAM is on. Nothing’s exploited…
That LiteLLM box someone spun up for a pilot may be mining crypto for a stranger

That LiteLLM box someone spun up for a pilot may be mining crypto for a stranger

A botnet steered by a poem has taken over more than 3,400 exposed AI and dev servers. Find yours before…