Even Protected Files Can Give Away What You Are Doing
Linux, Windows, Android and macOS file notifications can expose user activity without revealing the contents of a protected file.
Security
Vulnerabilities, defensive security, architecture and operational security.
A Familiar Phone Number Helped Intruders Into Astrana Health
Astrana Health declared a material cyber incident after callers impersonated staff, spoofed its main number and reached company systems.
The Security Agent That Could Turn a Writable PATH Into SYSTEM
One unqualified command in Rapid7 assessment content could let a low-privilege Windows user execute code as SYSTEM.
Kiteworks Pulled the Plug and Found a Critical Flaw
Kiteworks says its shutdown uncovered a critical flaw in a capability enabled for fewer than 1% of customers. Service can resume, with separate support guidance for self-hosted Advanced Forms.
Attackers Copied Every Incoming Belnet Email for Two Months
A supplier zero-day let attackers copy every incoming email sent to Belnet and one customer for more than two months.
One Link Can Borrow Your Administrator’s Authority
Validate remediation against the deployment, then document the account investigation.
Microsoft Traces Four Ransomware Brands to One Repeating Playbook
The payload name changed across Qilin, DragonForce, Anubis and BERT deployments, but the operator kept returning to the same remote-access and exfiltration tools.
How a Public iCloud Calendar Became a macOS Malware Loader
A MacSync downloader feeds a public iCloud calendar into zsh until it reaches commands hidden in the event description.
An Open Docker Port Gave Attackers Their Own AI Operator
The AI agent is not the entry point. An unauthenticated Docker API is, and Carbonato turns it into privileged host access and automated post-compromise work.
SolarWinds’ Patch Still Needs a Player Check
A server upgrade cannot certify every remote component.