Steve Zurier

A Microsoft 365 credential belonging to ConnectWise Cloud Backup was compromised, and researchers at Huntress confirmed i t's being used to gain unauthorized access to multiple Microsoft 365 environments.

Siemens on Oct. 19 disclosed that attackers exploited a flaw in its Software Center product by spreading malware via a ClickFix attack.

By now, most security pros are well-aware of the patches released Oct. 21 for PHP2Shell, the two PHP open-source coding bugs that were patched this morning following a disclosure before the originally scheduled patch.

PHP prepares emergency patches for two critical remote code execution vulnerabil...

Day 2 of the PHP2Shell incident has seen mainstream news media like the Associated Press pick up the story and security pros from the UK, Germany, and Finland to Kenya and Japan working on patching the flaws.

China-linked hackers used agentic AI to accelerate attacks on Microsoft cloud tenants via ConnectWise.

all the fracas last week, as of the afternoon of Oct. 26, there are no known public reports of successful exploitation — and no widespread exploitation.

WASHINGTON – In the backdrop of the recent PHP2Shell scare and a consensus that defenders are lagging behind the hackers, OpenAI's Cyber Executive

The Cybersecurity and Infrastructure Security Agency (CISA) on Oct. 27 added a critical CVSS 9.2 Brotli bug known as Node2Shell to its known exploited vulnerabilities (KEV) catalog.

Cisco Talos on Oct. 28 reported that China-linked threat actor UAT-11473 exploited a maximum-severity authentication bypass flaw in Cisco's SD-WAN Catalyst Controller.