72 Flaws, Eight Rated 10 Out of 10: The Spec Sheet for HPE’s Aruba Wireless Patch, and Which Version Your Access Points Need
Wireless gear tends to be installed once and then forgotten on the ceiling. HPE’s latest update for its Aruba wireless...
Tech
New BlackX Bootkit Slips Past Secure Boot on Fully Patched PCs Because a Manual Windows Fix Was Never Switched On
Installing a Windows update usually feels like the end of the job. A new piece of malware shows why, for...
Node2Shell, Explained: Your Questions About the Node.js Compression Bug That Researchers Just Turned Into Code Execution
When Node.js shipped security updates on Wednesday, October 21, the most serious fix was for a bug in the code...
Signed, Protected and Still Poisoned: How Attackers Slipped a Credential Stealer Into the LiteLLM AI Gateway’s Official Release
LiteLLM is the kind of software most business owners have never heard of but may already depend on. It gives...
From VPN Gateway to Hypervisor: How Ransomware Crews Are Turning a Months-Old Palo Alto Flaw Into Domain-Wide Access
Patched is not the same as safe if the patch never got installed. Palo Alto Networks’ Unit 42 team said...
PeerStitch, Part by Part: How a Memory-Only Implant Hid Inside FortiGate Firewalls Without Opening a Single Port
Firewalls sit at the edge of the network precisely so that everything else can trust them. That is what makes...
MITRE ATT&CK v20, Read Like Release Notes: New Entries on AI Abuse, MFA Workarounds and Attacks on Water Utilities
MITRE ATT&CK is the shared vocabulary security teams use to describe what attackers actually do once they go after a...
Case File: MALFEX, the npm Campaign That Keeps Re-Publishing Its Windows Malware Under New Names
When a registry takes down a malicious package, the usual assumption is that the threat is over. The operators behind...
BlockStrap in Plain Terms: A Glossary for Magento and Adobe Commerce Store Owners Facing a 10.0 Flaw
Online stores built on Magento Open Source or Adobe Commerce have a new emergency on the calendar. A flaw nicknamed...
Should You Patch NGINX This Week? A Decision Tree After Five New Flaw Fixes
NGINX sits in front of a lot of small business apps, reverse proxies, and internal portals. On October 14 it...
