Editor-in-Chief
Priya has covered enterprise security for over a decade, with a focus on vulnerability disclosure, incident response and the gap between vendor advisories and what defenders can actually action.
463 articles
Threat IntelCritical vulnerability in D-Link Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis and re
AMDCritical vulnerability in Veeam Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis and rem
Threat IntelCritical vulnerability in QNAP Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis and reme
DevSecOpsCritical vulnerability in GitHub Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis and re
Active ExploitCritical vulnerability in SonicWall Core System & Services (Authentication Bypass) allows remote adversaries to compromise system integrity. Review analysi
Threat IntelCritical vulnerability in Enterprise Infrastructure Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Rev
AWS CloudCritical vulnerability in Amazon AWS Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis an
Gov / DefenseCritical vulnerability in CISA Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis and reme
Threat IntelCritical vulnerability in CTM360 Exposes Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysi
LinuxCritical vulnerability in OpenSSH Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis and r
LinuxCritical vulnerability in Linux / Ubuntu Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysi
CMS SecurityCritical vulnerability in WordPress Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis and
Active ExploitCVE-2026-19868 in SonicWall SonicOS SSLVPN (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Vendor security p
MicrosoftCVE-2026-83844 in Microsoft Core System & Services (Out-of-Bounds Read) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security
Gov / DefenseDISCOV-INDUSTRIAL-OT-4200nae in CISA Core System & Services (Information Disclosure) allows remote attackers to trigger arbitrary code execution. Patch: Ve
Threat IntelCVE-2026-123158 in OpenSSH Core System & Services (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 10.6
Gov / DefenseCISA-AA-ROCKWELL-2026 in Rockwell Automation & CISA Allen-Bradley ControlLogix & CompactLogix PLCs (Information Disclosure) allows remote attackers to trig
CMS SecurityCVE-2026-119977, an unauthenticated upgrade-window race condition in WordPress Core versions 4.7 to 7.1.3, was targeted in 63,000 automated exploitation probes.
Data BreachThe Reserve Bank of India directs banks and payment entities to treat exposed credentials as active compromises, enforcing emergency isolations and audits.
Gov / DefenseCERT-In issued advisory CIAD-2026-0046 alerting NBFCs and digital lenders that attackers are exploiting flawed APIs to execute unauthorized loan disbursements.
Agentic AIA critical P1 vulnerability in ChatGPT's shared-conversation feature allowed attackers to execute arbitrary scripts in victim sessions to exfiltrate private chats.
VulnerabilityA comprehensive implementation guide for NBFCs navigating RBI Master Directions on IT governance, 6-hour incident disclosure, vendor audits, and VAPT.
MicrosoftA critical vulnerability in OpenCode allows malicious Model Context Protocol servers to execute arbitrary shell commands on Windows and WSL hosts during OAuth.
Deep DiveSingapore's Cyber Security Agency releases the National Quantum-Safe Migration Roadmap at SICW, setting strict 2031-2035 deadlines for Critical Infrastructure operators.