Mitigation Strategies

Patching Vulnerability Management Vendor Instructions Patch Management User Awareness Emergency Mitigation Service System Updates Software Updates Firmware Updates Endpoint Protection

3 ARTICLES

last wk.

DeadLock Ransomware Uses Session and Polygon Smart Contracts to Harden Extortion Infrastructure

Microsoft says an HTML recovery chat queries on-chain proxy addresses so operators can host leaks and change proxies without relying on takedown-prone domains.

4 ARTICLES

3w ago

Researcher Publishes LegacyHive PoC That Escalates Privileges on Patched Windows

3 ARTICLES

last mo.

Australia Warns of Mass CMS Exploitation Campaign Deploying Webshells

7 ARTICLES

last mo.

GigaWiper Backdoor Merges Spy Capabilities With Multiple Irreversible Wipers

6 ARTICLES

last mo.

Undocumented Backdoor Found in Multiple Tenda Router Firmware

4 ARTICLES

last mo.

CISA Lists PTC Windchill RCE in KEV as Vendor Confirms Active Web‑Shell Attacks

3 ARTICLES

2mo ago

Arista Declines Patch for Actively Exploited EOS Tunnel Flaw

6 ARTICLES

2mo ago

Active Exploitation of Palo Alto GlobalProtect Flaw Forces Urgent Patching

5 ARTICLES

2mo ago

Attackers Poison More Than 700 Ghost CMS Sites to Push ClickFix Malware

8 ARTICLES

3mo ago

Microsoft Issues Mitigations for YellowKey BitLocker Bypass

4 ARTICLES

3mo ago

CISA Adds Actively Exploited Microsoft Exchange Zero-Day to KEV Catalog

6 ARTICLES

3mo ago

Microsoft Says Exchange OWA Flaw Is Under Active Attack, Rolls Out Auto Mitigation

9 ARTICLES

3mo ago

Fragnesia Linux Kernel Flaw Gives Local Users Root Access

7 ARTICLES

3mo ago

Dirty Frag Linux Flaws Enable Local Root as Vendors Rush Fixes

11 ARTICLES

3mo ago

Dirty Frag Gives Local Users Root on Linux as Only One of Two Flaws Is Patched

15 ARTICLES

3mo ago

CISA Adds Actively Exploited ‘Copy Fail’ Linux Bug to KEV With May 15 Patch Deadline

7 ARTICLES

4mo ago

Mac ClickFix Campaign Shifts to Script Editor via Applescript Links

Mitigation Strategies

DeadLock Ransomware Uses Session and Polygon Smart Contracts to Harden Extortion Infrastructure

Public Proof‑of‑Concept Released for Certighost AD CS Flaw

Qilin Ransomware Exploits Palo Alto GlobalProtect Authentication Bypass

7‑Zip Issues Patch for XZ Decoder Buffer Overflow

Researcher Publishes LegacyHive PoC That Escalates Privileges on Patched Windows

Australia Warns of Mass CMS Exploitation Campaign Deploying Webshells

GigaWiper Backdoor Merges Spy Capabilities With Multiple Irreversible Wipers

Undocumented Backdoor Found in Multiple Tenda Router Firmware

CISA Lists PTC Windchill RCE in KEV as Vendor Confirms Active Web‑Shell Attacks

Arista Declines Patch for Actively Exploited EOS Tunnel Flaw

Never miss stories about

Mitigation Strategies

Active Exploitation of Palo Alto GlobalProtect Flaw Forces Urgent Patching

Attackers Poison More Than 700 Ghost CMS Sites to Push ClickFix Malware

Microsoft Issues Mitigations for YellowKey BitLocker Bypass

CISA Adds Actively Exploited Microsoft Exchange Zero-Day to KEV Catalog

Microsoft Says Exchange OWA Flaw Is Under Active Attack, Rolls Out Auto Mitigation

Fragnesia Linux Kernel Flaw Gives Local Users Root Access

Dirty Frag Linux Flaws Enable Local Root as Vendors Rush Fixes

Dirty Frag Gives Local Users Root on Linux as Only One of Two Flaws Is Patched

CISA Adds Actively Exploited ‘Copy Fail’ Linux Bug to KEV With May 15 Patch Deadline

Mac ClickFix Campaign Shifts to Script Editor via Applescript Links

Never miss stories about

Mitigation Strategies