Articles, practical guides and perspectives on IT, cloud and cybersecurity.
Researchers uncovered a campaign that installed bandwidth-sharing software on compromised network devices without owner consent. Activity spanned multiple countries.
Read article ↗
Palo Alto Networks reported exploitation of CVE-2026-0322 in vulnerable PAN-OS releases. Exploitation requires existing credentials and access to the management interface.
Read article ↗
Microsoft’s October security release contains a very large set of fixes, including zero-day issues. Its scale makes testing and prioritization essential.
Read article ↗
Microsoft announced tighter Content Security Policy controls in Entra ID sign-in flows to restrict untrusted scripts and reduce injection risks.
Read article ↗An international disruption targeted the EvilTokens phishing service, linked to thousands of compromised Microsoft accounts and abuse of device-code flows.
Read article ↗
CISA warned that ransomware groups are exploiting CVE-2026-59310 affecting VMware vCenter, a vulnerability for which a fix had already been released.
Read article ↗
Researchers documented phishing campaigns that conceal content through invisible Unicode characters to evade parts of email security filtering.
Read article ↗Ubiquiti released updates addressing three maximum-severity vulnerabilities in its product ecosystem, including UniFi OS and UniFi Protect.
Read article ↗
Reports of active exploitation of the wp2shell chain describe deployment of malicious plugins and webshells against vulnerable WordPress installations.
Read article ↗Let’s talk about your needs and priorities.