Cybersecurity Risks

Data Protection Vulnerability Assessment Incident Response Organizational Strategies Supply Chain Attacks Operational Risks Vulnerabilities Incident Response Plans Operational Impact Credential Management

3 ARTICLES

2w ago

JetBrains Patches Critical RCE in TeamCity On‑Premises

The update closes an authentication‑bypass bug that allowed unauthenticated HTTP(S) requests to run operating‑system commands on self‑hosted TeamCity servers, creating urgent risk for exposed instances.

6 ARTICLES

2w ago

Thousands of Internet‑Exposed BMCs Leak IPMI Password Hashes

7 ARTICLES

last mo.

CISA Orders Immediate Fixes for Actively Exploited LiteSpeed and Joomla Plugin Flaws

5 ARTICLES

3mo ago

PCPJack Malware Evicts TeamPCP From Cloud Systems and Harvests Credentials

4 ARTICLES

4mo ago

Flowise CVSS 10 Flaw Now Exploited in the Wild as 12,000+ Instances Remain Exposed

4 ARTICLES

5mo ago

FreeScout Zero-Click Flaw (CVE-2026-28289) Enables Full Server Takeover

9 ARTICLES

6mo ago

1Password Rolls Out Browser Pop-Up to Thwart Phishing on Mismatched Sites

6 ARTICLES

7mo ago

AWS Confirms CodeBuild Webhook Misconfigurations in Key Repositories, Reports No Exploitation

5 ARTICLES

8mo ago

Louvre Heist Exposes Years of Security Failures, Including 'Louvre' as Camera Password

6 ARTICLES

9mo ago

CISA Sets Nov. 14 Deadline After Active Attacks on Critical WSUS Flaw

4 ARTICLES

9mo ago

CISA Adds Motex Lanscope RCE Flaw to KEV, Citing Active Exploitation

3 ARTICLES

10mo ago

CERT Warns as Shai-Hulud npm Supply-Chain Attack Tops 500 Packages

3 ARTICLES

10mo ago

New Surveys Find Cyberattacks Rising as Staffing Gaps and Underreporting Strain Defenses

3 ARTICLES

10mo ago

Obsidian Details ‘Less Is Safer’ Engineering to Curb Software Supply-Chain Risk

3 ARTICLES

last yr.

Ransomware Gangs Escalate Extortion With Physical Violence and Regulatory Threats

3 ARTICLES

last yr.

Cybersecurity Risks

JetBrains Patches Critical RCE in TeamCity On‑Premises

Thousands of Internet‑Exposed BMCs Leak IPMI Password Hashes

CISA Orders Immediate Fixes for Actively Exploited LiteSpeed and Joomla Plugin Flaws

PCPJack Malware Evicts TeamPCP From Cloud Systems and Harvests Credentials

Flowise CVSS 10 Flaw Now Exploited in the Wild as 12,000+ Instances Remain Exposed

FreeScout Zero-Click Flaw (CVE-2026-28289) Enables Full Server Takeover

1Password Rolls Out Browser Pop-Up to Thwart Phishing on Mismatched Sites

AWS Confirms CodeBuild Webhook Misconfigurations in Key Repositories, Reports No Exploitation

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

Mexico's New Cybersecurity Plan Faces Scrutiny as Attacks Accelerate

Never miss stories about

Cybersecurity Risks

Hyderabad Police Warn of Prompt-Injection Attacks Targeting AI Systems

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

Louvre Heist Exposes Years of Security Failures, Including 'Louvre' as Camera Password

CISA Sets Nov. 14 Deadline After Active Attacks on Critical WSUS Flaw

CISA Adds Motex Lanscope RCE Flaw to KEV, Citing Active Exploitation

CERT Warns as Shai-Hulud npm Supply-Chain Attack Tops 500 Packages

New Surveys Find Cyberattacks Rising as Staffing Gaps and Underreporting Strain Defenses

Obsidian Details ‘Less Is Safer’ Engineering to Curb Software Supply-Chain Risk

Ransomware Gangs Escalate Extortion With Physical Violence and Regulatory Threats

Play Ransomware Gang Hits 900 Organizations with Evasive New Tactics

Never miss stories about

Cybersecurity Risks