What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks
Real-world exploitation concentrates in a small, high-impact subset of CVEs. Learn how defenders can prioritize vulnerabilities based on exploitation likelihood, exposure, and potential blast radius. The…
Read on Microsoft
BITTER Expands Its Arsenal with PapRAT
FortiGuard Labs examines a BITTER cyberespionage campaign targeting South Asian organizations through three attack chains and the PapRAT remote access trojan
Read on Fortinet
How a surveillance camera can be remotely disabled: the problem and the fix | Kaspersky official blog
A vulnerability in Intelbras cameras allows them to be remotely disabled. We explain the issue, and how to fix it.
Read on Kaspersky
Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post Inside a malicious Claude Code-branded extension…
Read on Microsoft
From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through authentication relay and Kerberos. The post From help desk impersonation to…
Read on Microsoft
How to download and read ebooks safely | Kaspersky official blog
We explain how to download and read ebooks safely, whether a device can be infected through an ebook, and why pirate libraries and free-book sites are…
Read on Kaspersky
Building Cybersecurity Careers through Certification and Continuous Learning
Explore how Fortinet training and certification help people enter cybersecurity, build practical skills, and advance throughout their careers.
Read on Fortinet
What AI Cybercrime Exercises Reveal About Collective Defense
Fortinet's Derek Manky shares lessons from three CLTC tabletop exercises on AI-enabled cybercrime and what they reveal about decision-making in collective defense and previews the next…
Read on Fortinet
Five data tricks you don’t want this Halloween
The deal is simple: Give us a treat, or there might be a trick. Of course, these days, we’re mostly there for the treat: A chocolate…
Read on Veeam
More headlines
Zero Trust KPIs Your Board Actually Needs to See
Read on Forescout
Replication for Disaster Recovery: How to Hit Tight RTOs and RPOs
Here is a question worth sitting with: when did you last prove your recovery time objective, rather than assert it? The post Replication for Disaster Recovery:…
Read on Veeam
Resilience as a boardroom strategy
In an AI-driven enterprise, resilience is no longer an insurance policy. It is the operating model for trust, continuity, and scale. The post Resilience as a…
Read on Veeam