Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-59310: China-Nexus APT Exploiting VMware vCenter Directory Traversal to Deploy Babuk-Derived Ransomware — Detection and Remediation Guide
The Bottom Line Up Front A suspected China-nexus advanced persistent threat (APT) group is actively exploiting CVE-2026-59310 — a critical d...
CVE-2026-70368: Fedora 44 Stunnel 5.80 Fixes SOCKS Bypass and Key Memory Access Flaw — Patching and Detection Guide
Introduction Fedora has released an update for stunnel 5.80 on Fedora 44 (advisory FEDORA-2026-67c2201ad8) that remediates CVE-2026-70368, a...
French Tax Authority (DGFiP) Breach: 680,000 Records Exposed via Compromised Credentials — Detection and Hardening Guide
680,000 Taxpayer Records Walked Out the Front Door — With Valid Credentials France's tax authority, the Direction Générale des Finances Publ...
CVE-2026-19478: Critical GitLab GraphQL Flaw — Unauthenticated Project Deletion Detection and Remediation Guide
Introduction GitLab has shipped emergency security updates for a critical vulnerability — CVE-2026-19478, CVSS 9.4 — affecting both GitLab C...
Beverly Hills Plastic Surgery Data Theft and Extortion: Defensive Playbook for Healthcare Providers
What Happened Terry J. Dubrow, MD — a Beverly Hills plastic surgeon with significant public visibility — has confirmed a data theft/extortio...
CVE-2025-62593: Ray Code Injection Vulnerability Actively Exploited — Detection and Remediation Guide
Introduction On August 17, 2026, CISA added CVE-2025-62593 — a code injection vulnerability in the Ray Project's open-source Ray distributed...
Cavern (Cav3rn) C2: Detecting DNS Tunneling and Google Apps Script Abuse by Iranian APT Operators
Cavern C2 Blends Into Legitimate Traffic — and Your Perimeter Won't Notice Kaspersky's ongoing tracking of the Cavern (aka Cav3rn) command-a...
Hugging Face Supply-Chain Attack & PHANTOM-B: Threat Modeling Lessons for Defending AI/ML Pipelines
Introduction When Adam Shostack — arguably the most authoritative voice in threat modeling alive — says he was "blown away" by an attack dis...
Snowflake GitHub Actions Workflow Injection: Defending Against Crafted-Issue Command Injection in CI/CD Pipelines
Snowflake GitHub Actions Workflow Injection: What Defenders Need to Know Security researchers at Wiz disclosed a GitHub Actions workflow inj...