Hackers are compromising hotel Wi-Fi gateways to hijack Microsoft 365 accounts
The compromised Wi-Fi gateways were discovered across multiple US cities as well as in India and Saudi Arabia, and impacted users were from companies in…
Month: July 2026
Ivanti EPMM RCE Vulnerability Chain Exploited in the Wild
Updated on 2025-05-21 at 10:00 (GMT+3) to clarify the relationship between the various IP addresses in the exploitation section, and at 20:00 (GMT+3) to describe…
Arista patches VeloCloud Orchestrator zero-day exploited in attacks
Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is being actively exploited in attacks. The vulnerability, tracked as CVE-2026-16812,…
CISA Warns of Fortinet FortiOS Vulnerability Exploited in Attacks
CISA has added the actively exploited Fortinet FortiOS vulnerability CVE-2025-68686 to its Known Exploited Vulnerabilities (KEV) catalog after confirming evidence of active attacks. The vulnerability…
The Governance Vacuum: Who Owns Present-State Proof?
Modern governance systems are built upon the principle of accountability. Responsibilities are assigned, duties are defined, authorities are delegated, and obligations are documented. Across safety,…
Hugging Face Has a Deepfake Nudes Problem
Ever so slowly, the crackdown on harmful sexual deepfakes is taking hold. Over the past few months, US law enforcement officials have seized deepfake hosting…
Apple iOS 26.6 Update Fixes Flaws Allowing Kernel-Level Code Execution and Root Access
Apple has released iOS 26.6 and iPadOS 26.6, a significant security update that addresses numerous vulnerabilities across core operating system components, media frameworks, WebKit, wireless…
Microsoft Fixes Certighost Flaw That Allowed Domain Controller Impersonation
Microsoft has patched a high-severity vulnerability in Active Directory Certificate Services that allowed a user with basic domain access to obtain a valid certificate identifying…
Download: The High-Performance Team Playbook
Get practical insight from teams who’ve built, scaled and handed over engineering functions at enterprise level. Most engineering teams don’t fail because of bad engineers.…
What’s your data worth on the dark web? (Lock and Code S07E15)
This week on the Lock and Code podcast… Twenty years ago, a British mathematician named Clive Humby popularized a phrase that came to describe data’s…
Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
Swati KhandelwalJul 27, 2026Vulnerability / Website Security Public exploit details released on July 27 show how an unauthenticated request can reach PHP’s eval() function inside…
Why some VMware customers pay for upgrades they never use
A growing number of VMware customers are doing something that looks contradictory on paper: renewing their VMware Cloud Foundation (VCF) subscriptions in full, then declining…