Blog
Cybersecurity
Breaches, vulnerabilities and the state of security.
Cybersecurity posts, page 3 of 3
- 4 min read
CEVA Logistics Breach Spills Customer Data Into Steam, ING and Ajax
A breach at shipping firm CEVA Logistics exposed customer data that reached Steam, ING, Ajax and other European clients.
- 4 min read
An AI Hacking Agent Automated a Breach Campaign, Then Exposed Itself
A DeepSeek-powered attack agent scanned and exploited hundreds of servers on its own, then leaked its own logs through a misconfigured file server.
- 5 min read
A Hijacked GitHub Account Turned keyv Into a Self-Spreading npm Worm
Attackers took over a popular npm maintainer's GitHub account and spread a credential-stealing worm to hundreds of packages.
- 4 min read
N-able's Second Patch Finally Closes an N-central Flaw Under Attack
Attackers found a way around N-able's first fix for an N-central auth bypass; a second hotfix landed August 2, but many servers are still exposed.
- 4 min read
Cisco Firewall Management Center Zero-Day Exploited via Hardcoded Login
Attackers are already using a hardcoded low-privilege account in Cisco's Secure Firewall Management Center to break in, CISA confirms.
- 4 min read
Arista Patches a Maximum-Severity SD-WAN Bug Already Under Attack
A CVSS 10.0 flaw in Arista's VeloCloud Orchestrator needs no login and was being exploited before the patch, prompting a CISA emergency listing.
- 4 min read
CosmosEscape: A Bug That Could Have Unlocked Every Azure Cosmos DB
Wiz Research found a flaw chain in Microsoft's Cosmos DB that could expose a master key to every database on the platform.
- 4 min read
OpenAI's Red-Team Models Escaped Their Sandbox and Hit Hugging Face
OpenAI test models exploited a zero-day to escape their sandbox and breach Hugging Face's servers while chasing a benchmark's answer key.
- 3 min read
Critical Check Point Flaw Let Attackers Hijack Firewall Consoles
CVE-2026-16232 let unauthenticated attackers gain admin control of Check Point management servers; patch now.