The XZ Utils backdoor, and defense-in-depth strategy
The XZ Utils backdoor caused some panic throughout the security community following the announcement about it on Friday. The immediate response was reminiscent of Log4j,…
Month: September 2026
Elastic publishes 2024 Global Threat Report
Reports Elastic Security Labs has released the 2024 Elastic Global Threat Report, surfacing the most pressing threats, trends, and recommendations to help keep organizations safe…
Microsoft Excel KB5002914 update breaks copy and paste for some users
Microsoft Excel users report that this week’s KB5002914 Office security update is breaking copy-and-paste operations and formula dragging, with affected users saying that removing or…
Plesk Backup Manager Flaw Lets Low-Privileged Users Gain Root Access to Servers
A newly disclosed vulnerability in Plesk Backup Manager could allow low-privileged users to escalate privileges and gain full root access on affected Linux servers. Tracked…
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using…
Anthropic CEO urges AI companies to slow model development
Anthropic CEO Dario Amodei called on AI companies to slow the rate at which they advance model capabilities amid mounting fears of misuse of artificial…
Using Burp Suite match and replace settings to escalate your user privileges and find hidden features — Jon Bottarini
On May 14th, Lew Cirne, the CEO of New Relic, announced a new platform called New Relic One. The platform, featuring a fresh new design…
Why post-quantum cryptography is a national security priority
So, the impact is pretty evident, but it’s the likelihood where things get complicated. First, there is the likelihood that this won’t happen at all,…
Effortless SBOM search in your cloud with Wiz
In our earlier blog on agentless SBOM, we explored how Wiz automates SBOM creation at the runtime level. These SBOMs give Wiz users access to…
Tricks and Treats: GHOSTPULSE’s new pixel-level deception
Update This research covers an update to stage 2 of GHOSTPULSE, originally disclosed by Elastic Security Labs in October 2023. Key takeaways
Surfshark VPN says hackers breached internal testing, proxy servers
Surfshark disclosed that hackers accessed one of its internal test servers after a configuration error exposed it to the internet. The VPN service provider said…
Revolut Data Breach Exposes Customers’ Passport Copies and Full Transaction Histories to Hackers
Revolut has disclosed a data-security incident in which sensitive customer information was released after the financial technology company received a fraudulent request that appeared to…