Cloud security checklists have become a staple for organizations, but it turns out they don’t work as intended. A new analysis of 11 real-world incidents reveals that identity exposure is often the primary entry point for attackers, who then use cross-domain privilege escalation to bypass security measures and wreak havoc on cloud infrastructure. The stories … Read more
A critical vulnerability has been discovered in ConnectWise’s ScreenConnect remote access platform, leaving millions of systems exposed to potential attacks. The security flaw affects both cloud and on-premises deployments of ScreenConnect, which is widely used by managed service providers (MSPs), IT departments, and support teams for troubleshooting, patching, and system maintenance. The vulnerability allows attackers … Read more
MikroTik Routers Under Attack: Hackers Exploit Critical Flaws for Full Control A serious security threat is unfolding as hackers have started exploiting a chain of two recently discovered vulnerabilities in MikroTik routers, allowing them to take control of devices with SSH services exposed to the internet. Poland’s CERT agency has dubbed this exploit chain “MikroTrick,” … Read more
OpenAI’s ChatGPT is taking a significant step forward in its ability to mimic human writing styles, with the introduction of a new “Writing Style” feature that allows the AI to learn from examples drawn directly from your personal apps. This means that ChatGPT can now use your existing writing patterns to inform its own output, … Read more
A new strain of malware called JSCeal has been discovered, capable of bypassing even Google’s advanced authentication mechanisms by exploiting stolen session cookies. This highly sophisticated attack vector has left many wondering how it works and what it means for online security. At its core, JSCeal is a type of malware designed to intercept and … Read more
A critical vulnerability in N-central, a network monitoring and management platform used by thousands of IT service providers worldwide, has left customers scrambling for yet another hotfix from vendor N-able. This marks the fourth such patch in just five weeks, raising concerns about the company’s ability to keep pace with security threats. The vulnerability, identified … Read more
A Critical Vulnerability in Popular IT Management Platform Exposes Thousands of Systems to Attack N-able, a leading provider of remote monitoring and management (RMM) solutions, has released an emergency hotfix to address a maximum-severity vulnerability affecting its N-central platform. This critical flaw, tracked as CVE-2026-86218, allows threat actors to execute malicious code on unpatched systems … Read more
Malware that Exploits Google Session Cookies Leaves Millions Vulnerable A sophisticated malware strain, known as JSCeal, has been discovered to be able to bypass Google’s authentication mechanism by utilizing stolen session cookies. This vulnerability affects millions of users who rely on Google services for their online security and identity management. The malware’s ability to exploit … Read more
Cybersecurity Firm N-able Issues Emergency Patch for Critical Vulnerability in Remote Monitoring Platform A maximum-severity remote code execution (RCE) vulnerability has been identified in N-central, a popular remote monitoring and management (RMM) platform used by IT departments and managed service providers (MSPs). The flaw, tracked as CVE-2026-86218, allows attackers to execute malicious code on unpatched … Read more
ChatGPT’s Most Powerful Model Yet Rolls Out to Paid Users, But Free Access Remains Uncertain OpenAI has begun rolling out its most advanced language model to date, ChatGPT Astra, to users with a $20 Plus subscription. This move marks a significant step forward in the development of AI-powered tools, but it raises questions about when … Read more