Cyber Insights 2026: Zero Trust and Following the Path 2026-01-29 at 14:05 By Kevin Townsend Zero Trust is not a thing; it is an idea. It is not a product; it is a concept – it is a destination that has no precise route and may never be reached. The post Cyber Insights 2026: Zero […]
Cyber Insights 2026: Zero Trust and Following the Path Read More »
Cyber Insights 2026: Offensive Security; Where It is and Where Its Going 2026-01-28 at 16:48 By Kevin Townsend Malicious attacks are increasing in frequency, sophistication and damage. Defenders need to find and harden system weaknesses before attackers can attack them. The post Cyber Insights 2026: Offensive Security; Where It is and Where Its Going appeared
Cyber Insights 2026: Offensive Security; Where It is and Where Its Going Read More »
Cyber Insights 2026: External Attack Surface Management 2026-01-13 at 20:08 By Kevin Townsend AI will assist companies in finding their external attack surface, but it will also assist bad actors in locating and attacking the weak points. The post Cyber Insights 2026: External Attack Surface Management appeared first on SecurityWeek. This article is an excerpt
Cyber Insights 2026: External Attack Surface Management Read More »
Over 50,000 Asus Routers Hacked in ‘Operation WrtHug’ 2025-11-20 at 15:31 By Ionut Arghire A Chinese threat actor is exploiting known vulnerabilities in discontinued Asus devices in an Operational Relay Box (ORB) facilitation campaign. The post Over 50,000 Asus Routers Hacked in ‘Operation WrtHug’ appeared first on SecurityWeek. This article is an excerpt from SecurityWeek
Over 50,000 Asus Routers Hacked in ‘Operation WrtHug’ Read More »
Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability 2025-11-14 at 23:49 By Ionut Arghire Security firms say the flaw has been actively exploited for weeks, even as Fortinet quietly shipped fixes and CISA added the bug to its KEV catalog. The post Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability appeared first on SecurityWeek. This
Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability Read More »
Critical Vulnerabilities Patched in TP-Link’s Omada Gateways 2025-10-22 at 17:12 By Eduard Kovacs One of the flaws can be exploited by remote unauthenticated attackers for arbitrary command execution. The post Critical Vulnerabilities Patched in TP-Link’s Omada Gateways appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Critical Vulnerabilities Patched in TP-Link’s Omada Gateways Read More »
All SonicWall Cloud Backup Users Had Firewall Configurations Stolen 2025-10-09 at 11:30 By Ionut Arghire In early September, hackers stole the firewall configuration backup files stored using the MySonicWall service. The post All SonicWall Cloud Backup Users Had Firewall Configurations Stolen appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
All SonicWall Cloud Backup Users Had Firewall Configurations Stolen Read More »
Virtual Event Today: Zero Trust & Identity Strategies Summit 2025-10-08 at 17:53 By SecurityWeek News Join the virtual event we dive into the world of digital identity management and the role of zero-trust principles and associated technologies. The post Virtual Event Today: Zero Trust & Identity Strategies Summit appeared first on SecurityWeek. This article is
Virtual Event Today: Zero Trust & Identity Strategies Summit Read More »
The Y2K38 Bug Is a Vulnerability, Not Just a Date Problem, Researchers Warn 2025-10-07 at 11:43 By Eduard Kovacs The Year 2036/2038 problem is a bug that will be triggered in more than a decade, but hackers could exploit it today against ICS and consumer devices. The post The Y2K38 Bug Is a Vulnerability, Not
The Y2K38 Bug Is a Vulnerability, Not Just a Date Problem, Researchers Warn Read More »
Cisco Patches Zero-Day Flaw Affecting Routers and Switches 2025-09-25 at 11:46 By Ionut Arghire The security defect allows remote attackers with administrative privileges to execute arbitrary code as the root user. The post Cisco Patches Zero-Day Flaw Affecting Routers and Switches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Cisco Patches Zero-Day Flaw Affecting Routers and Switches Read More »
Record-Breaking DDoS Attack Peaks at 22 Tbps and 10 Bpps 2025-09-24 at 12:41 By Eduard Kovacs The attack was aimed at a European network infrastructure company and it has been linked to the Aisuru botnet. The post Record-Breaking DDoS Attack Peaks at 22 Tbps and 10 Bpps appeared first on SecurityWeek. This article is an
Record-Breaking DDoS Attack Peaks at 22 Tbps and 10 Bpps Read More »
SonicWall Prompts Password Resets After Hackers Obtain Firewall Configurations 2025-09-18 at 13:33 By Ionut Arghire The company sent a new preferences file to less than 5% of customers, urging them to import it into firewalls and reset their passwords. The post SonicWall Prompts Password Resets After Hackers Obtain Firewall Configurations appeared first on SecurityWeek. This
SonicWall Prompts Password Resets After Hackers Obtain Firewall Configurations Read More »
Zero Trust Is 15 Years Old — Why Full Adoption Is Worth the Struggle 2025-09-15 at 21:21 By Kevin Townsend Fifteen years after its debut, Zero Trust remains the gold standard in cybersecurity theory — but its uneven implementation leaves organizations both stronger and dangerously exposed. The post Zero Trust Is 15 Years Old —
Zero Trust Is 15 Years Old — Why Full Adoption Is Worth the Struggle Read More »
US Cybersecurity Agency Flags Wi-Fi Range Extender Vulnerability Under Active Attack 2025-09-03 at 22:15 By Ionut Arghire Flaw allows attackers to reset and hijack TP-Link TL-WA855RE devices; CISA urges users to retire discontinued extenders. The post US Cybersecurity Agency Flags Wi-Fi Range Extender Vulnerability Under Active Attack appeared first on SecurityWeek. This article is an
US Cybersecurity Agency Flags Wi-Fi Range Extender Vulnerability Under Active Attack Read More »
Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack 2025-09-02 at 18:18 By Ionut Arghire Part of a wave of DDoS attacks that lasted for weeks, the assault was a UDP flood mainly originating from Google Cloud. The post Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek
Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack Read More »
CrowdStrike to Acquire Onum to Fuel Falcon Next-Gen SIEM With Real-Time Telemetry 2025-08-28 at 15:09 By SecurityWeek News CrowdStrike says the acquisition will bring valuable technology to enhance its Falcon Next-Gen SIEM. The post CrowdStrike to Acquire Onum to Fuel Falcon Next-Gen SIEM With Real-Time Telemetry appeared first on SecurityWeek. This article is an excerpt
CrowdStrike to Acquire Onum to Fuel Falcon Next-Gen SIEM With Real-Time Telemetry Read More »
Citrix Patches Exploited NetScaler Zero-Day 2025-08-27 at 14:51 By Ionut Arghire Zero-day exploited in the wild forces Citrix and CISA to push emergency patch deadlines for federal agencies. The post Citrix Patches Exploited NetScaler Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Citrix Patches Exploited NetScaler Zero-Day Read More »
Help Desk at Risk: Scattered Spider Shines Light on Overlook Threat Vector 2025-08-08 at 19:08 By Torsten George As attackers target help desks and identity systems, traditional security perimeters are proving insufficient against agile, socially-engineered threats. The post Help Desk at Risk: Scattered Spider Shines Light on Overlook Threat Vector appeared first on SecurityWeek. This
Help Desk at Risk: Scattered Spider Shines Light on Overlook Threat Vector Read More »
SonicWall Says Recent Attacks Don’t Involve Zero-Day Vulnerability 2025-08-07 at 20:23 By Eduard Kovacs SonicWall has been investigating reports about a zero-day potentially being exploited in ransomware attacks, but found no evidence of a new vulnerability. The post SonicWall Says Recent Attacks Don’t Involve Zero-Day Vulnerability appeared first on SecurityWeek. This article is an excerpt
SonicWall Says Recent Attacks Don’t Involve Zero-Day Vulnerability Read More »
Chinese Spies Target Networking and Virtualization Flaws to Breach Isolated Environments 2025-07-25 at 16:19 By Ionut Arghire Chinese cyberespionage group Fire Ant is targeting virtualization and networking infrastructure to access isolated environments. The post Chinese Spies Target Networking and Virtualization Flaws to Breach Isolated Environments appeared first on SecurityWeek. This article is an excerpt from
Chinese Spies Target Networking and Virtualization Flaws to Breach Isolated Environments Read More »