Silent Patches, Fast Exploits, and an Arrest Inside Ransomware Response
TL;DR: SonicWall’s CVSS 10.0 flaw is under exploitation, AnyDesk shipped a root-level fix with no security label, and Flax Typhoon’s KEV deadline passed Sund...
Home
Recent Posts
FortiBleed Is Still Open, and Atlassian Took Two Hours
TL;DR: The FBI says FortiBleed attackers are still creating their own FortiGate admin accounts and locking real admins out, and attackers hit Atlassian’s CVE...
Q3 2026 Lookback: Trust Was the Attack Surface
If Q3 2026 had a theme, it was this: the attackers stopped needing us to make a mistake, and started inheriting trust we had already handed out.
Kiteworks Fizzled, NetScaler Didn’t: A Weekend Shift for Defenders
TL;DR: The Kiteworks shutdown passed quietly with no CVE, no new build, and no confirmed attack, while two Citrix NetScaler RCE zero-days went from Reddit ru...
No CVE, No Patch, Just Intel: Why Kiteworks Told Everyone to Unplug
TL;DR: Kiteworks told customers to unplug servers for nine hours on federal threat intel with no CVE attached, a different DPRK crew walked off with $351.6M ...