Kiteworks Pulled the Plug and Found a Critical Flaw
Kiteworks says its shutdown uncovered a critical flaw in a capability enabled for fewer than 1% of customers. Service can resume, with separate support guidance for self-hosted Advanced Forms.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
Attackers Copied Every Incoming Belnet Email for Two Months
A supplier zero-day let attackers copy every incoming email sent to Belnet and one customer for more than two months.
One Link Can Borrow Your Administrator’s Authority
Validate remediation against the deployment, then document the account investigation.
Microsoft Traces Four Ransomware Brands to One Repeating Playbook
The payload name changed across Qilin, DragonForce, Anubis and BERT deployments, but the operator kept returning to the same remote-access and exfiltration tools.
Your Salesforce Agent Could Have Sent the Phish in Slack
A malicious CRM lead could cross into Agentforce and emerge as a trusted Slack reply without showing who triggered it. Salesforce has changed the defaults.
How a Public iCloud Calendar Became a macOS Malware Loader
A MacSync downloader feeds a public iCloud calendar into zsh until it reaches commands hidden in the event description.
An Open Docker Port Gave Attackers Their Own AI Operator
The AI agent is not the entry point. An unauthenticated Docker API is, and Carbonato turns it into privileged host access and automated post-compromise work.
SolarWinds’ Patch Still Needs a Player Check
A server upgrade cannot certify every remote component.
A Leaked GitLab Email Address Can Become a Code-Push Credential
An incoming GitLab email address carries account authority. Research shows why a leaked address needs the same response as a leaked access token.
Miljödata Reported 2.2 Million People Affected. Sweden Fined It SEK 1.8 Million
The enforcement decision is smaller than the breach headline, but its reasoning reaches every supplier handling concentrated public-sector data.