Fortinet SSO Vulnerability Actively Exploited to Seize FortiGate Firewall Admin Access
A critical security flaw in Fortinet’s Single Sign-On (SSO) feature for FortiGate firewalls, identified as CVE-2025-59718, is…
continue reading..
Cisco Confirms Active Exploitation of Critical CVE-2026-20045 RCE Flaw in Unified Communications Systems
Cisco has released a security advisory detailing a serious vulnerability (CVE-2026-20045) affecting several of its Unified Communications…
continue reading..
New Study Finds Most Website Apps Access Sensitive User Data Without Permission
A recent cybersecurity study has uncovered a significant and growing problem affecting thousands of the world’s most…
continue reading..
NexShield ‘CrashFix’: How a Fake Browser Repair Crashes Chrome and Installs a Remote Access Trojan
Executive Summary A malicious browser extension operating under the name NexShield – CrashFix was identified actively targeting…
continue reading..
When Software Threat Models Fall Short: Why MITRE ESTM 3.0 Matters for Embedded Security
For years, embedded systems security has lived in an uncomfortable gap. On one side, we have traditional…
continue reading..
Trusted Updates Turned Weaponized: Snap Store Publisher Hijacking Leads to Silent Crypto Theft on Linux
Executive Summary This incident describes a supply-chain attack targeting Linux users through the Snap application ecosystem operated…
continue reading..
861 GB Stolen: Inside the Alleged Everest Ransomware Breach of McDonald’s India
Executive Summary In 2024, McDonald’s India became the subject of a ransomware extortion claim by the Everest…
continue reading..
Critical Trust & Isolation Failures in IBM Platforms: JWT Admin Takeover and Container Command Execution (CVE-2025-36418 & CVE-2025-36059)
IBM ApplinX – JWT Privilege Escalation (Admin Impersonation) Product overview (at top)IBM ApplinX is an application modernization…
continue reading..
CVE-2025-56353: tinyMQTT Memory Leak Enables Remote Resource Exhaustion Attacks
This issue is in the tinyMQTT message broker, an implementation of the MQTT protocol used in many…
continue reading..
