Europe Just Started the 24-Hour Cyber Reporting Clock for Digital Products
ENISA's CRA Single Reporting Platform is now live, and the first 24-hour reporting clock is running. Manufacturers need more than a portal login to meet it.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
The Helpdesk Asked You to Upgrade Your Passkey. Then the Quiet Download Began.
The passkey was only the pretext. Microsoft says attackers are calling personal phones, capturing cloud sessions and quietly collecting files and email for hours or days.
A Certificate Can Make Your Check Point VPN Run an Attacker’s Code Before Login
Two critical certificate-processing flaws can expose Check Point gateways and management servers to unauthenticated remote code execution. Supported systems have fixes. Several older releases do not.
The Phishing Site Was Never Online. It Was Built Inside Your Browser.
The attacker did not need to host a conventional phishing page. Microsoft redirects, a blob URL and a service worker assembled the fake login inside the victim’s browser.
Attackers Turned FortiGate Into a Pivot Server. CISA Just Started the Clock.
CISA has set a 12 September deadline for CVE-2025-25249 as researchers describe attackers using compromised FortiGate devices for tunnelling, credential harvesting and internal discovery.
SmartHRMS Ransomware Left Payroll Customers With No Recovery Point
SmartHRMS says ransomware encrypted its SQL databases and every attached backup set. Customers have no recovery point, while missing network-flow logs leave possible data theft unresolved.
Can You Defend This Access Decision?
Keep a reviewable record of evidence, limits and decisions.
This Self-Hosted Knowledge Tool Could Publish Its Own Admin Panel to the Internet
Knowns before 0.30.0 can expose an unauthenticated management API on every network interface. One API call can then create a public tunnel, while a second vulnerability allows arbitrary files to be overwritten.
One Failed Login Could Hand Attackers Full Control of 389 Directory Server
Red Hat says a failed SASL PLAIN login can leave a privileged identity behind in 389 Directory Server. A second anonymous bind on the same connection may inherit full Directory Manager control without valid credentials.
N-central’s New CVSS 10 Flaw Could Run Code Before Anyone Logged In
N-able released a fourth N-central hotfix for a CVSS 10 flaw that could let an unauthenticated attacker run code. NHS England reports possible zero-day exploitation, while N-able says production exploitation is not confirmed.