Our Blog
CISA has updated its Known Exploited Vulnerabilities (KEV) catalog with several critical entries across software ecosystems including ownCloud, Microsoft, Red Hat, and the Linux kernel. These additions highlight active adversary targeting of perimeter services, local privilege escalation flaws, and remote authentication bypasses. Security operations and infrastructure teams should prioritize immediate validation, emergency patching, and log hunting across all affected assets.
Reading time 10 minutes
MFA can successfully authenticate a user while attackers still gain access by stealing the session that follows. This article examines how adversary-in-the-middle phishing, session hijacking and token theft bypass conventional security monitoring, and what security teams can do to detect and prevent post-authentication compromise.
Reading time 15 minutes
Security teams face one new CVE every 7.4 minutes, yet only a fraction of vendor security advisories describe vulnerabilities with meaningful exploitation likelihood or exposure. This analysis maps the evidence separating genuine operational risk from advisory noise, for SOC teams, vulnerability management programmes, and security leadership responsible for prioritisation decisions.
Reading time 10 minutes