November 1, 2026

WordPress Upgrade-Window RCE: What Site Owners Must Do Now

A seconds-long race during core updates is drawing tens of thousands of probes. Block one folder, then patch.

October 31, 2026

Ivanti Connect Secure Zero-Day Chain: A Hunt and Harden Guide

UTA0576 chained three Ivanti Connect Secure zero-days to get root and raid Active Directory. How to patch, hunt from your SIEM and AD logs, and recover safely.

#ivanti #vpn-security #threat-hunting #zero-day #active-directory #cisa-kev #incident-response

cybersecurity

New Post

October 30, 2026

GitLab CVSS 10 Regex RCE Hits CISA KEV: What Self-Managed Admins Must Do

CISA adds GitLab CVE-2026-97229 to KEV after attacks on Alpine Linux. Which versions fix both CVSS 10 regex RCEs, the Ruby catch, detection and a response checklist.

#gitlab #cve-2026-97229 #cve-2026-110264 #ci-cd #devsecops #cisa-kev #patch-management #incident-response

cybersecurity

New Post

October 29, 2026

The eMudhra CA Key Compromise: What It Means for Your Business

Eight eMudhra CA keys could be computed from public data. Browsers are safe, but servers, apps and devices may not be. A plain-language action plan for businesses.

#emudhra #pki #tls-certificates #supply-chain #business-security #south-asia

cybersecurity

New Post

October 28, 2026

Volt Typhoon Silent Train: What Happened and What to Do Now

Volt Typhoon's Silent Train hides zero-day attacks on SD-WAN, RMM and network management tools behind disposable relays. What happened, who is at risk, what to do.

#volt-typhoon #apt #sd-wan #msp #edge-devices #threat-intelligence #threat-hunting

cybersecurity

New Post

October 28, 2026

Magento PolyShell Hits CISA KEV: What Store Owners Must Do Now

CISA adds Magento PolyShell (CVE-2026-48356) to KEV as a 953-store loader campaign grows. Timeline, compromise checks, clean-up steps and the BlockStrap patch.

#magento #adobe-commerce #polyshell #cve-2026-48356 #ecommerce #web-skimming #incident-response #cisa-kev

cybersecurity

New Post

October 27, 2026

Token Spraying in Microsoft 365: A Hunt and Harden Guide

A token-spraying campaign hijacked 97 Microsoft 365 accounts despite MFA. KQL hunts, rogue-device checks and Conditional Access fixes to find and stop it.

#microsoft-365 #entra-id #token-theft #threat-hunting #kql #business-email-compromise #conditional-access

cybersecurity

New Post

October 26, 2026

ConnectWise Cloud Backup Breach: What Happened and What to Do Now

China-aligned Storm-0940 abused ConnectWise Cloud Backup app credentials to hit 2,250+ Microsoft 365 tenants. Timeline, KQL hunts and a clean-up checklist.

#supply-chain #microsoft-365 #entra-id #oauth #incident-response #threat-intelligence #ai-security

cybersecurity

October 25, 2026

LiteLLM 1.107.0 Compromise: What Happened and What to Do Now

LiteLLM 1.107.0 on PyPI and Docker shipped a credential stealer on 21 Oct 2026. Timeline, who is affected, detection queries and a clean-up checklist.

#supply-chain #ai-security #pypi #docker #litellm #credential-theft #incident-response

cybersecurity

October 24, 2026

Node2Shell Hunt Guide: Find, Fix and Fence Off CVE-2026-111497

Node2Shell (CVE-2026-111497) lets crafted Brotli data corrupt Node.js memory. How to find exposed runtimes, block risky paths and hunt for signs of abuse.

#node2shell #nodejs #cve-2026-111497 #threat-hunting #detection-engineering #container-security #patching

cybersecurity

October 23, 2026

PHP2Shell: The PHP Flaws Under Attack and What to Do Now

PHP2Shell (CVE-2026-109618, CVE-2026-109619) enables unauthenticated RCE on most PHP servers. Affected versions, detection signals and a patch checklist.

#php2shell #php #rce #vulnerability-management #web-security #patching #ecommerce

blog

October 11, 2024

Welcome to the OffensioX Blog

At OffensioX, we empower individuals and organizations with the knowledge and tools to navigate the ever-evolving digital landscape.

#welcome #cybersecurity

Page 1 of 2