Editor-in-Chief
Priya has covered enterprise security for over a decade, with a focus on vulnerability disclosure, incident response and the gap between vendor advisories and what defenders can actually action.
463 articles
Crypto / Web3Threat actors exploited zero-day flaws in third-party perimeter security appliances to breach Bitget's wallet job server, siphoning $387.5M across 11 chains.
Threat IntelA path traversal vulnerability in the Office-PowerPoint Model Context Protocol server allows AI agents to be manipulated via prompt injection into overwriting host files.
Threat IntelA critical vulnerability in the SConnect browser digital signature native host component allows malicious websites to achieve unauthenticated remote code execution.
FortinetA critical zero-day flaw in Fortinet FortiMail secure email gateways allows unauthenticated remote attackers to write arbitrary files and execute code as root.
Threat IntelCISA advisory ICSA-26-274-06 details critical Broken Object Level Authorization in Meari IoT Cloud OpenAPI, exposing millions of surveillance devices worldwide.
Threat IntelAn authentication bypass and SQL injection in ground-station before v0.8.0 allows remote attackers to plant admin accounts and seize telemetry consoles.
Threat IntelA privilege escalation vulnerability in Internet2 Grouper before v7.5.1 allows authenticated users with rule editing rights to elevate to full system administrator.
Threat IntelAn element confusion flaw in Apache WSS4J allows attackers to substitute encrypted headers with unencrypted plaintext, bypassing WS-Security confidentiality policies.
Threat IntelAn authentication bypass in Zammad helpdesk versions 6.3.0–6.5.4 allows remote attackers to hijack administrative sessions and achieve remote code execution.
Threat IntelA critical heap use-after-free vulnerability in ESnet iperf3 v3.21 allows unauthenticated remote attackers to crash network test daemons or execute code.
Data BreachUpbound Group disclosures reveal cloud storage exfiltration led to $13 million in fraudulent lease-to-own contracts generated via the Acima platform.
Data BreachCalifornia enacts landmark SB 446 establishing a rigid 30-day consumer breach notice clock and mandatory 15-day Attorney General disclosures for enterprise intrusions.
Data BreachThe Data Protection Board of India issues operational directives detailing tiered penalties up to ₹250 Crore and mandatory personal data breach notification rules.
AWS CloudAWS discloses high-severity SSRF flaw CVE-2026-15643 in the HealthLake MCP server, enabling attackers to leak temporary SigV4 IAM credentials and healthcare FHIR records.
Threat IntelA critical CVSS 9.4 path traversal flaw CVE-2026-41948 in Dify allows unauthenticated attackers to bypass workspace isolation and invoke internal Plugin Daemon APIs.
Threat IntelA critical TOCTOU race condition flaw CVE-2026-87996 in Open WebUI enables attackers to execute DNS rebinding SSRF attacks and harvest cloud metadata and credentials.
Threat IntelA critical integer overflow flaw CVE-2026-86289 in the Ollama GGUF model decoder allows attackers to trigger memory corruption and remote code execution on AI inference clusters.
Deep DiveAn architectural vulnerability in Model Context Protocol (MCP) OAuth token passthrough allows malicious tool servers to impersonate users and hijack enterprise APIs.
Cyber AttackAdaptHealth Corp files an SEC Form 8-K under Item 1.05 disclosing a cyberattack that disrupted internal systems and resulted in unauthorized patient data exfiltration.
RansomwareRiver Financial discloses unauthorized ransomware intrusion and customer data exfiltration in SEC Form 8-K filings following network extortion demands.
Deep DiveThe Reserve Bank of India overhauls bank cyber regulations with the 2026 Directions, mandating Board-level accountability, assurance audits, and 6-hour reporting.
RansomwareNutex Health files amended SEC Form 8-K Item 1.05 confirming patient PHI and provider records exfiltrated and published following ransomware double extortion.
Data BreachThe Reserve Bank of India mandates accelerated 6-hour incident disclosures, board-level oversight, and strict third-party cloud risk controls across banks and financial institutions.
Threat IntelOracle's Critical Security Patch Update fixes maximum-severity CVSS 10.0 flaw CVE-2026-83021 in WebLogic Server Core enabling unauthenticated remote takeover.