Technology ❯ Cybersecurity

Security Practices

Patch Management Incident Response Vulnerability Management User Awareness Weak Passwords Governance in AI Firewall Configuration Detection Methods AI in Security Risk Mitigation

MantaxOtax Malware Blends Ransomware and Spyware on Android

This threat raises account-takeover risk by stealing OTPs and messages because operators can re-point control servers via GitHub.

Elementor Pro Vulnerability Fueled Widespread Webshell Attacks

Threat Actor Used Fake Crypto Executive and Booby‑Trapped Google Doc to Target Security Researcher

AI Agent Exploits Script Injection in Snowflake GitHub Actions

SQL Injection Used to Compile Khunt Toolkit Inside Oracle Database

Public Proof‑of‑Concept Released for Certighost AD CS Flaw

Oracle Issues Emergency Patch for Critical RCE in Identity Manager and Web Services Manager

New Public Exploit Targets Chrome Zero‑Day CVE-2026-2441, Heightening Patch Urgency

Microsoft to Refresh Secure Boot Certificates for Windows Starting in March

Fortinet Begins Patching Actively Exploited FortiCloud SSO Bypass as CISA Sets Jan. 30 Deadline

Microsoft Issues Emergency Patches for Exploited Office Zero-Day CVE-2026-21509

Fortinet Confirms FortiCloud SSO Bypass Hitting Fully Patched FortiGate Firewalls

Fake GitHub Exploits Are Installing Webrat, Security Firms Warn

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

Amazon Reveals Pre‑Disclosure Exploits of Citrix NetScaler and Cisco ISE to Plant Stealth Backdoor

CERT Warns as Shai-Hulud npm Supply-Chain Attack Tops 500 Packages

Microsoft Flags New XCSSET macOS Variant Targeting Developers and Hijacking Crypto

Cloud Security Alliance Releases SaaS Security Capability Framework v1.0 for App-Level Controls

Silver Fox Uses Trusted Windows Drivers to Deliver ValleyRAT and Evade Blocklists

Microsoft Lays Out AI-First Windows 2030 Vision Emphasizing Voice and Vision Inputs