Editorial
Expressions & POVs
Expert takes, practical perspectives, and opinionated security narratives.
The cPanel Crisis: One Bug, Millions Exposed as Mirai and ‘Sorry’ Ransomware Deploy in 24 Hours
Point of View
The cPanel Crisis: One Bug, Millions Exposed as Mirai and ‘Sorry’ Ransomware Deploy in 24 Hours
Researchers have uncovered active exploitation of a critical vulnerability in cPanel & WHM (CVE-2026-41940), an authentication bypass flaw that has been abused as a zero-day following public disclosure. The vulnerability was rapidly weaponized within 24 hours, with multiple third parties leveraging
ShadowPad Rising: SHADOW-EARTH-053 Hits Exchange Servers
Point of View
ShadowPad Rising: SHADOW-EARTH-053 Hits Exchange Servers
Executive Summary A cyber espionage campaign attributed to the China-linked threat cluster SHADOW-EARTH-053 has been observed targeting government, defense, telecommunications, and transportation organizations across South, East, and Southeast Asia, as well as a European NATO member state. The attac
Structure, Event Types Recorded, UI Operations, and Security & Compliance Benefits
Point of View
Structure, Event Types Recorded, UI Operations, and Security & Compliance Benefits
Audit logs capture and record administrative activities within your organization’s cloud infrastructure. They offer a detailed record of user activities, system events, and resource changes across an organization’s cloud infrastructure. This article helps understand the structure of the log, the typ
Microsoft’s February 2026 Patch Tuesday: Six Zero-Days, 58 flaws Patched Amid Growing Exploit Activity
Point of View
Microsoft’s February 2026 Patch Tuesday: Six Zero-Days, 58 flaws Patched Amid Growing Exploit Activity
The second Tuesday of the month has arrived, bringing another significant wave of Microsoft security updates. In February 2026, Microsoft issued patches for 58 vulnerabilities, including six actively exploited zero-day flaws and five rated Critical. As part of this month’s release, Microsoft has als
Jigsaw Ransomware: Pay or Say Goodbye to Files Hourly
Point of View
Jigsaw Ransomware: Pay or Say Goodbye to Files Hourly
A new ransomware has risen. Known as Jigsaw Ransomware, it is named after the iconic character that appears in the ransomware note. Jigsaw ransomware will encrypt the files and ask victims to pay a ransom of 150 USD worth of Bitcoins or .4 BTC. If the victim takes a long time to pay the ransom, […]
In-the-Wild Exploitation of Cisco SD-WAN Flaws Leading to Unauthorized Administrative Access
Point of View
In-the-Wild Exploitation of Cisco SD-WAN Flaws Leading to Unauthorized Administrative Access
Threat actors are actively targeting enterprise Cisco Catalyst SD-WAN infrastructure, exploiting authentication bypass and chained vulnerabilities to gain unauthorized administrative access. Recent threat intelligence from Cisco Talos highlights ongoing in-the-wild exploitation campaigns leveraging
Filemanager Fever: MrRot_13’s cPanel Exploitation Campaign Is Spreading Fast
Point of View
Filemanager Fever: MrRot_13’s cPanel Exploitation Campaign Is Spreading Fast
Researchers have attributed an active exploitation campaign against a critical cPanel authentication bypass vulnerability, tracked as CVE-2026-41940, to a long-running threat actor dubbedMr_Rot13. The campaign deploys a cross-platform backdoor named Filemanager, which steals credentials and establis
Double Trouble: Apache’s Double-Free Flaw Gives Attackers a Shot at Your Server
Point of View
Double Trouble: Apache’s Double-Free Flaw Gives Attackers a Shot at Your Server
The Apache Software Foundation has issued a security update to fix a critical flaw in the HTTP/2 module of Apache HTTP Server, identified as CVE-2026-23918. This vulnerability could be abused to cause a denial-of-service condition and, in certain scenarios, may even allow remote code execution. Alth
DirtyDecrypt: Technical Analysis of a Critical Linux Kernel Privilege Escalation Vulnerability
Point of View
DirtyDecrypt: Technical Analysis of a Critical Linux Kernel Privilege Escalation Vulnerability
The discovery of DirtyDecrypt (linked to CVE-2026-31635) reveals a critical vulnerability that highlights a serious weakness in modern Linux kernel memory handling mechanisms. This flaw can be leveraged by attackers to achieve privilege escalation to root level, posing a significant risk to enterpri