Tag Archive

FortiBleed 2.0 investigation, published October 27, revealed 40,573 cleartext secret records in exposed FortiGate configurations, including 37,076 local-user passwords and 1,576 Active Directory LDAP bind records linking firewall access, VPN services, and internal identity systems. The researchers examined 1,703 configuration-report …

Hackers have abused CyberStrikeAI, an open-source penetration-testing platform, to coordinate 44 AI agents across network scanning, exploitation, persistence, and data theft. The activity primarily targeted Japanese organizations, showing how attackers can turn security tools into repeatable intrusion workflows without developing …

Hackers have abused government and school domains to promote illegal gambling websites, creating unauthorized subdomains while leaving the institutions’ main websites running normally. Two unrelated operations used changes to Domain Name System (DNS) records to place gambling pages beneath trusted …

Prevention lost; now what? That question not backup-window math defines ransomware recovery, a discipline measured in hours-to-business and judged on three hard problems: finding the clean restore point, proving it’s actually clean, and rebuilding at scale without reinfecting yourself. We …

Ransomware crews attack backups before they attack production encrypting or deleting recovery points first, then ransoming what’s left. That inverted kill chain has turned backup from an infrastructure checkbox into a security control, judged now by immutability, blast-radius isolation, and …