Month: July 2026

What Happened our firewall sits at the edge of your network. It inspects every packet. It sees everything that comes in and everything that goes out. And for months, Russian-speaking hackers have been using exactly that privileged position to silently steal 110 million credentials from over 430,000 Fortinet FortiGate firewalls around the world. The campaign, […]

AT A GLANCE What Is CVE-2026-20253 and What Happened? On June 10, 2026, Cisco-owned Splunk disclosed CVE-2026-20253 — a critical vulnerability in Splunk Enterprise, the world’s most widely deployed Security Information and Event Management (SIEM) platform. The flaw earned a CVSS score of 9.8 out of 10 — the highest possible for network-exploitable vulnerabilities — […]

What Happened A video file should not be able to hack your server. And yet, as of June 22, 2026, it can. Security researchers at JFrog published details of CVE-2026-8461 — a critical vulnerability they named PixelSmash — affecting FFmpeg’s MagicYUV video decoder. FFmpeg is the world’s most widely deployed media processing framework. It is […]

What Happened On June 16, 2026, Apple quietly released Beats Firmware Update 1B211 — a security patch for its Beats Studio Buds wireless earbuds. The update addresses a high-severity vulnerability that could have allowed an attacker sitting nearby to listen through the earbuds’ microphone without ever pairing with the device. The vulnerability, tracked as CVE-2025-20701, […]

Active Threat: On June 18, 2026, ShinyHunters announced a major expansion of its leak infrastructure — adding mirrors, torrent networks, and a permanent hosting pledge. This is not a hypothetical risk. Over 109 confirmed victims across 14 countries in the last 12 months alone. What Happened They’ve been active since 2019. They’ve survived arrests, FBI […]

Article Summary: Most ransomware operations target small businesses at volume, running through dozens of prospects per month. A 22-person company can be researched in 40 minutes using public records, attacked using session-token theft after a single phishing click, and ransomed within a week. What follows is a step-by-step walkthrough of how that attack unfolds, written […]

Article Summary: Microsoft has tightened several Microsoft 365 defaults over the past few years, but those changes do not always apply retroactively. Tenants set up before 2022, or configured by a previous IT provider and left alone since, often still have legacy settings in place around file sharing, external email forwarding, third-party app consent, audit […]

Article Summary: Cyber insurance applications have grown longer because of specific claim trends from 2023 and 2024, including the MOVEit supply-chain breach, the Change Healthcare ransomware incident, and the Arup deepfake wire fraud. Each new section asks about specific security controls including immutable backups, layered MFA, callback verification on wires, EDR or MDR coverage, vendor […]

Article Summary: Offboarding is the final step of a process that started on the employee’s first day. Shared logins, forgotten SaaS subscriptions, untracked personal devices, and client relationships locked inside one person’s inbox are almost always traceable to informal onboarding shortcuts taken months earlier. Tightening the onboarding side turns each future departure into a 90-minute […]

Article Summary: Immutable backups are backup copies that nobody can change or delete during a fixed retention period, including administrators and attackers using stolen credentials. Cyber insurance carriers ask about them on renewal applications because ransomware operators routinely destroy backups before encrypting production systems. A backup sitting on your network under regular admin credentials does […]