Your Questions on the Barracuda Email Gateway Flaws That Chain to Root Without a Login, Answered
Email security appliances sit at a privileged spot on the network. This week’s Barracuda patches are a reminder that the...
L7 News
Fake OpenAI and SpaceX Event Invites Are a Trap for Work Microsoft and Google Logins
An invite to a free ChatGPT Pro month or a private SpaceX briefing looks like a perk. In a campaign...
FBI and CISA Tell Grocery, Healthcare and Cold-Chain Operators: Pull Refrigeration Controllers Off the Public Internet
Your freezers may not feel like cybersecurity equipment, but federal agencies say attackers are treating them that way. On Thursday,...
A Password Longer Than 256 Characters Can Unlock Accounts That Should Have No Password: Patch Alpine and Other musl SSH Servers Now
If you run OpenSSH on Alpine Linux—or another musl-based system—with password logins still on, stop and check today. A newly...
No Password, No MFA Prompt, No Person: How Stolen App Secrets Let One Attacker Into 27 Organizations Through Their IT Providers
Here Is How Layered Defenses Help When the Login Isn’t a PersonMost security advice about Microsoft 365 is about people:...
Doors Open, Systems Dark: Ransomware Knocks Out Wi-Fi, Checkouts and the Website at New York’s Queens Public Library
One of New York City’s three public library systems is running without most of its technology. Queens Public Library confirmed...
Your Linux Servers’ Update Tool Could Be Tricked Into Installing a Swapped Package: Questions on the APT Flaw, Answered
Most Linux servers in small businesses, from web hosts to file servers, run Debian, Ubuntu or a system built on...
948 Ways to Become Root, Found by Machine for About $1,279 Each: The Numbers Behind OpenAI’s Linux Kernel Experiment
OpenAI has published research describing an automated system that, running on a cyber-focused AI model it has not yet released,...
A 2025 Network Move Left a DigiCert Archive Reachable From the Internet. Customer Contact Details and Some ID Documents Were Read
DigiCert, one of the best-known issuers of the security certificates that put the padlock on websites, has confirmed that someone...
The Switch Was Patched, the Exploit Still Worked: Zyxel GS1900 Owners Need a Second Firmware Update
If you updated your Zyxel GS1900 office switches this summer and crossed them off the list, they need to go...
