Detection Guidance for ConnectWise CWE-288
UPDATE: Read our full analysis of CVE-2024-1709 & CVE-2024-1708 and detection guidance here. On February 19, 2024, ConnectWise released an advisory related to the disclosure of…
Latest Cybersecurity News — Page 360
View all →
Microsoft releases emergency updates to fix Windows Server issues
Microsoft has released out-of-band (OOB) updates to fix issues affecting Windows Server systems after installing the April 2026 security updates. As Microsoft confirmed last week,…
Public Notion Pages Leaks Profile Photos and Email address of Editors
Notion, a widely used productivity and collaboration platform, is facing intense scrutiny from the cybersecurity community. Security researchers have revealed that public Notion pages silently…
Windows 11 Dev Build Introduces Improved Secure Boot Oversight and Storage Security
Microsoft has rolled out Windows 11 Insider Preview Build 26300.8170 to the Dev Channel, bringing crucial updates for system security and storage management. Announced by…
Meta and PortSwigger drive offensive security further to find what others miss
Meta Bug Bounty and PortSwigger have formed a partnership to help security researchers sharpen their skills, collaborate more closely, and improve vulnerability discovery. The initiative…
A week in security (April 13 – April 19)
Last week on Malwarebytes Labs: This old-school scam is still working “Your shipment has arrived” email hides remote access software Browser Guard gets even better…
Vercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials
Ravie LakshmananApr 20, 2026Cloud Security / Data Breach Web infrastructure provider Vercel has disclosed a security breach that allows bad actors to gain unauthorized access…
Storage implications of a modern IT architecture
IT leaders are deploying an increasing number of containers to modernise applications, run commercial off-the-shelf software, and handle artificial intelligence (AI) and advanced analytics workloads.…
Cisco ISE Vulnerabilities Enable Remote Code Execution
Cisco has released security updates to fix multiple vulnerabilities in its Identity Services Engine and Webex Services, warning that successful exploitation could lead to remote…
Vercel Security Incident Traced To Third-Party AI Tool
Vercel has disclosed a Vercel security incident involving unauthorized access to certain internal systems, with the breach traced back to a compromised third-party AI tool.…
Judo Bank hires ex-Bendigo CIO
Judo Bank has named Nathalie Moss as its chief technology officer, the first time since mid-2024 that an executive has held that specific title. Nathalie…
Proof Beats Promise: The Trust Crisis AI Is Creating
By Lakshmi Hanspal, Chief Trust Officer, DigiCert Artificial intelligence is transforming enterprise systems, quietly dismantling the foundations of digital trust. For decades, organisations operated on…