Security Intelligence
Microsoft 365 outage theme drives credential phishing and support scams
Threat actors are exploiting the November 12 Microsoft 365 outage with fake restore emails, support calls and payment...
Security Intelligence
SAP patches ICM2SHELL, PROXYGATE and SAML2 authentication bypass flaws
SAP patched four CVSS 10.0 flaws, including ICM2SHELL and PROXYGATE, that allow unauthenticated remote code execution....
Security Intelligence
SCKit campaign targets MSP ScreenConnect environments
ConnectWise disabled five ScreenConnect ext. after attackers deployed SCKit malware across 400 partner environments....
Security Intelligence
MSP Process security incident creates customer tenant risk
MSP Process disclosed a breach exposing Microsoft Partner Center app credentials. Learn the risks, what to look for in...
Security Intelligence
N-able takes N-central offline as alleged zero-day exploits surface
N-able took N-central offline after 33 alleged zero-days went public. Here’s what’s known, what’s at risk, and the...
Security Intelligence
Not just refrigerators: the security challenges of connected operational technology (OT)
Attackers hit supermarket and blood plasma refrigeration controllers across Europe. Learn how remote management creates...
Security Intelligence
OpenSSH releases fix for authentication bypass on Alpine Linux
A high-severity OpenSSH flaw (CVE-2026-123158) lets attackers log in to passwordless accounts on Alpine Linux. See...
Security Intelligence
Application identity abuse targets MSPs and customer environments
Threat actors are using valid application credentials to breach MSPs through Microsoft Entra ID and Azure DevOps. Learn...
Security Intelligence
Barracuda ESG flaws can lead to root access
Barracuda just addressed two vulnerabilities that can be chained on Barracuda Email Security Gateway (ESG) to obtain...
Security Intelligence
Researchers achieve root access through Linux TCP flaw
A critical Linux kernel use-after-free flaw (CVE-2026-98432) enables unauthenticated root access. See patch status and...
Security Intelligence
Trojanized Claude Code extension distributed through Cursor marketplace
A trojanized Claude Code extension (v2.1.313) was distributed via the Cursor marketplace on Oct 29, 2026. Learn what it...
Security Intelligence
PHP2Shell exploited against firewalls
Palo Alto Networks confirms active exploitation of PHP2Shell in PAN-OS firewalls. Learn who’s affected, how attackers...