Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Alisa Viejo, United States, 25th March 2025, CyberNewsWireActive Roles Wins 2025 Cybersecurity Excellence Award for Hybrid Active Directory Protection on Lates…
Introduced in 1999, Microsoft Active Directory is the default identity and access management service in Windows networks, responsible for assigning and enforci…
Active Directory remains the authentication backbone for over 90% of Fortune 1000 companies. AD's importance has grown as companies adopt hybrid and cloud infr…
Microsoft Active Directory (AD) has been holding up enterprise identity for decades. It decides who gets in, what they can touch, and when. But the environment…
A privilege escalation flaw has been demonstrated in Windows Server 2025 that makes it possible for attackers to compromise any user in Active Directory (AD)."…
Recent research on Samba Active Directory (AD) implementations has revealed a critical vulnerability that allows attackers to gain elevated privileges and seiz…
Active Directory (AD) is among the oldest pieces of software still used in the production environment and can be found in most organizations today. This is des…
A recent IcedID malware attack enabled the threat actor to compromise the Active Directory domain of an unnamed target less than 24 hours after gaining initial…
Microsoft on Monday revealed new malware deployed by the hacking group behind the SolarWinds supply chain attack last December to deliver additional payloads a…
It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is document…
The malware known as GootLoader continues to be in active use by threat actors looking to deliver additional payloads to compromised hosts."Updates to the Goot…
A recently patched high-severity flaw impacting SolarWinds Serv-U file transfer software is being actively exploited by malicious actors in the wild.The vulner…
In a rapidly evolving digital landscape, it's crucial to reevaluate how we secure web environments. Traditional antivirus-approach solutions have their merits,…
The recently disclosed critical security flaw impacting Apache ActiveMQ is being actively exploited by threat actors to distribute a new Go-based botnet called…
Given the continuous rise in active exploitation of the now-known CitrixBleed flaw, governments issued new…New Alerts Issued For CitrixBleed Flaw Following Act…
The Kinsing threat actors are actively exploiting a critical security flaw in vulnerable Apache ActiveMQ servers to infect Linux systems with cryptocurrency mi…
Days after back-to-back disclosures about actively exploited zero-day vulnerabilities, Cisco has finally patched them with…Patches Released For The Actively Ex…
The notorious DarkGate malware has become active again, as it now spreads via compromised Skype…DarkGate Malware Becomes Active, Spreads Via Skype Accounts on …
The recently patched TeamCity RCE flaw is now under active attack by numerous ransomware gangs.…TeamCity RCE Flaw Actively Exploited To Deploy Ransomware on La…
Months after patching the vulnerabilities, researchers still detected active exploitation of Adobe ColdFusion for malware…Active Exploitation Of Adobe ColdFusi…
Zimbra recently addressed a severe zero-day vulnerability found actively exploited in the wild. While the…Zimbra Patched An XSS Zero-Day Vulnerability Under Ac…
Tel Aviv, Israel, June 22nd, 2023, Cyberwire The industry’s first-ever directory of virtual Chief Information…First Directory of Virtual CISO Providers Launche…
A new macOS malware, Atomic (AMOS), is actively targeting crypto wallets, serving as an infostealing…Atomic macOS Infostealer Malware Actively Targets Crypto W…
A zero-day vulnerability in the WPGateway WordPress plugin recently surfaced online following active exploits. The…Actively Exploited Zero-Day Vulnerability Fo…
