Kiteworks, a leading provider of secure file-sharing software, has released critical security patches to address 126 vulnerabilities in its Email Protection Gateway (EPG) solution. Among these, one particularly concerning issue is a maximum-severity code injection vulnerability that could allow attackers to gain complete control over the affected appliance. The vulnerability, tracked as CVE-2026-54154, affects all … Read more
Zero Trust Architecture’s Unseen Weakness Lays Bare the Risks of Human Error Despite widespread adoption of Zero Trust principles, organizations are still vulnerable to sophisticated attacks. The latest threat to emerge is not a new vulnerability or exploit, but rather a fundamental flaw in how we approach identity verification on Day One – when a … Read more
International Law Enforcement Operation Disrupts Notorious Ransomware Gang, Arrests Three Suspects In a significant blow to the global cybercrime underworld, an international law enforcement operation code-named “Operation KillSwitch” has successfully dismantled the notorious ransomware gang known as KillSec. Led by authorities from Germany and involving 10 other countries, including Belgium, Finland, Greece, the Netherlands, Romania, … Read more
Financial services companies are being left vulnerable to cyber attacks due to a critical weakness in their software supply chain. What’s happening is that identity exposure, often resulting from misconfigured or outdated systems, is creating backdoors for hackers to exploit and gain unauthorized access to sensitive data. The issue lies in the way modern software … Read more
A particularly insidious WordPress backdoor has been discovered, which not only compromises a website’s security but also possesses an unsettling property – it can rebuild itself after being detected and removed. This malicious code, known as “Echelon,” exploits vulnerabilities in the popular content management system (CMS) to establish a persistent presence on compromised sites. The … Read more
International Law Enforcement Operation Dismantles Notorious Ransomware Gang, Kills Switch In a major blow to cybercrime, an international law enforcement operation has dismantled the notorious KillSec ransomware gang, seizing its dark web data leak site and servers, and leading to three arrests. What’s striking about this case is that the alleged mastermind behind the group … Read more
A Critical Vulnerability in Cisco SD-WAN Manager Exposes Hundreds of Networks to Exploitation The US Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in the Cisco Catalyst Software-Defined Wide Area Network (SD-WAN) Manager to its Known Exploited Vulnerabilities catalog. The flaw, designated as CVE-2023-2018, allows an attacker with administrative privileges to bypass … Read more
A sophisticated cyber espionage campaign linked to Moonshot AI Associates has been disrupted by OpenAI, a leading artificial intelligence research organization. The operation, known as “Reasoning Extraction,” aimed to exploit sensitive information from compromised identities, paving the way for targeted attacks on high-value targets. At its core, this campaign relied on cross-domain privilege escalation, which … Read more
Financial services companies are facing a growing threat as hackers exploit vulnerabilities in their software supply chains. A recent trend has emerged, where identity exposure is being used to unlock active attack paths, leaving these institutions vulnerable to data breaches and financial loss. At its core, this issue revolves around cross-domain privilege escalation (CDPE), a … Read more
A newly discovered backdoor in WordPress plugins has left thousands of websites vulnerable to exploitation, with a disturbing twist: even after cleaning up the malware, it can rebuild itself using various methods. This complex attack highlights the importance of ongoing vigilance in cybersecurity and the need for better defensive strategies. The backdoor, dubbed “Elexio,” was … Read more