Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Microsoft KB5002907 Pulled After Deactivating Office 2016/2019 — Emergency Rollback and License Recovery Guide
Microsoft has paused the rollout of the KB5002907 Microsoft 365 update after widespread reports that it deactivated — and in some cases comp...
Lunex Stealer Abuses AMD Driver for BYOVD EDR-Kill and Browser Credential Theft — Detection and Defense Guide
Executive Summary Ontinue researchers have detailed a four-stage attack chain delivering Psychedelic Stealer, an infostealer sold as part of...
CVE-2026-35273: ShinyHunters Bypass WAFs to Exploit Oracle PeopleSoft — Detection and Remediation Guide
Introduction Google's threat intelligence teams are warning of a renewed, mass-exploitation campaign against a critical vulnerability in Ora...
Elementor WordPress CSRF Flaw Enables Unauthenticated Admin Account Creation — Detection and Remediation Guide
Elementor WordPress CSRF Flaw Lets Unauthenticated Attackers Create Administrator Accounts WordPress site owners running the Elementor plugi...
AI-Cheap Retry Loops: Detecting Iterative Cloud Privilege Escalation Before It Succeeds
Introduction Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter — and...
USN-8729-5: Ubuntu Linux Kernel (AWS FIPS) Vulnerabilities — Patching and Detection Guide for Cloud Workloads
Overview Canonical has published USN-8729-5, a security update for the Linux kernel used in AWS FIPS environments, addressing multiple vulne...
Cloudflare Containers Cross-Tenant Leftover Disk Data Exposure: Defender Verification and Hardening Guide
What happened Cloudflare said it fixed a flaw in Cloudflare Containers that allowed a paying customer to read data that other customers' con...
Unpatched OnePlus OxygenOS Root Flaw Chain (Also Affecting OPPO): Detection and Hardening Guide for Android Fleets
Introduction Security researcher Rasmus Moorats has demonstrated a full root chain against the OnePlus 15 running the latest OxygenOS build ...
CVE-2026-7891 Retracted: Siemens Mendix Runtime Advisory Revoked — What Defenders Should Do Now
Introduction CISA has revoked ICS Advisory ICSA-26-209-02, which originally flagged Siemens Mendix Runtime for a critical-severity flaw trac...