Attackers Are Now Hijacking Exposed Node-RED Automation Servers With a Single Web Request 
Synology Issues a Rare Ransomware Warning: Outdated NAS Boxes Are Being Encrypted by C3RB3R 
Northflank Tells Every Customer to Rotate Secrets After a Breach, and Stolen AI Keys Are Already Being Used 
Attackers Are Trying to Catch WordPress Sites Mid-Update: The Race-Condition Flaw Fixed in 7.1.4, and a Checklist for Site Owners 
Run an Online Store on Drupal? Attackers Are Already Using a Commerce Core Flaw That Needs No Login. Five Steps for Today 
Windows Update Certificates Expire in 2027, and Unsupported PCs Will Be Cut Off
Here Is How Layered Defenses HelpEvery business has that one PC: the old machine in the back office that runs...
FBI Takes Down Domains Behind Flax Typhoon Scanning and Phishing Tools: Your Questions Answered
U.S. authorities have struck at the tools behind one of China’s best-known state-backed hacking operations. Here are the key questions...
Five Critical Cisco Nexus Switch Flaws on One Page: A Spec Sheet and NX-OS Patch Checklist
Cisco has released advisories for five critical vulnerabilities in NX-OS, the operating system on its Nexus data center switches. In...
Infected Before It Leaves the Box: How Midnight Mimosa Hides in Budget Android Phones, Step by Step
Most phone malware needs the owner to install something. Midnight Mimosa doesn’t. Researchers at Bitdefender found it already inside the...
From Fake Job Offers to a Guilty Plea: A Timeline of the 15,000-Mule Network That Laundered Cybercrime Cash
When criminals empty a business bank account, they still need a way to turn the stolen balance into money they...
Backup Consoles Under Attack: Two AhsayCBS Flaws Are Being Exploited, and There Is No Patch Yet
Backup servers are supposed to be the safety net. This week, one widely used backup management platform became a target...
Outlook Will Block MSIX Installer Attachments in November: A Timeline of Microsoft’s Attachment Crackdown
Here Is How Layered Defenses HelpAttackers love anything that lets them slip software onto a computer through an email. Microsoft...
One Phishing Click, 1.3 Million People Exposed: Six Things to Know About the Arizona Courts Breach
Arizona’s court system has updated the public on a cyberattack first disclosed in late September, and the numbers are now...
Chrome 155 Lands With 247 Security Fixes, Four of Them Critical: The IT Briefing
Browsers are the busiest software on most business computers, and this week’s Chrome release is unusually large. Here is the...
A Poem on GitHub Is Steering a Botnet of Hijacked AI Servers: PoeLLM in Questions and Answers
Companies experimenting with AI often spin up model servers fast and worry about security later. A new cryptomining campaign is...
