cybersecurity New Post October 30, 2026 GitLab CVSS 10 Regex RCE Hits CISA KEV: What Self-Managed Admins Must Do CISA adds GitLab CVE-2026-97229 to KEV after attacks on Alpine Linux. Which versions fix both CVSS 10 regex RCEs, the Ruby catch, detection and a response checklist. #gitlab #cve-2026-97229 #cve-2026-110264 #ci-cd #devsecops #cisa-kev #patch-management #incident-response
cybersecurity New Post October 29, 2026 The eMudhra CA Key Compromise: What It Means for Your Business Eight eMudhra CA keys could be computed from public data. Browsers are safe, but servers, apps and devices may not be. A plain-language action plan for businesses. #emudhra #pki #tls-certificates #supply-chain #business-security #south-asia
cybersecurity New Post October 28, 2026 Volt Typhoon Silent Train: What Happened and What to Do Now Volt Typhoon's Silent Train hides zero-day attacks on SD-WAN, RMM and network management tools behind disposable relays. What happened, who is at risk, what to do. #volt-typhoon #apt #sd-wan #msp #edge-devices #threat-intelligence #threat-hunting
cybersecurity New Post October 28, 2026 Magento PolyShell Hits CISA KEV: What Store Owners Must Do Now CISA adds Magento PolyShell (CVE-2026-48356) to KEV as a 953-store loader campaign grows. Timeline, compromise checks, clean-up steps and the BlockStrap patch. #magento #adobe-commerce #polyshell #cve-2026-48356 #ecommerce #web-skimming #incident-response #cisa-kev
cybersecurity New Post October 27, 2026 Token Spraying in Microsoft 365: A Hunt and Harden Guide A token-spraying campaign hijacked 97 Microsoft 365 accounts despite MFA. KQL hunts, rogue-device checks and Conditional Access fixes to find and stop it. #microsoft-365 #entra-id #token-theft #threat-hunting #kql #business-email-compromise #conditional-access
cybersecurity New Post October 26, 2026 ConnectWise Cloud Backup Breach: What Happened and What to Do Now China-aligned Storm-0940 abused ConnectWise Cloud Backup app credentials to hit 2,250+ Microsoft 365 tenants. Timeline, KQL hunts and a clean-up checklist. #supply-chain #microsoft-365 #entra-id #oauth #incident-response #threat-intelligence #ai-security
cybersecurity New Post October 25, 2026 LiteLLM 1.107.0 Compromise: What Happened and What to Do Now LiteLLM 1.107.0 on PyPI and Docker shipped a credential stealer on 21 Oct 2026. Timeline, who is affected, detection queries and a clean-up checklist. #supply-chain #ai-security #pypi #docker #litellm #credential-theft #incident-response
cybersecurity October 24, 2026 Node2Shell Hunt Guide: Find, Fix and Fence Off CVE-2026-111497 Node2Shell (CVE-2026-111497) lets crafted Brotli data corrupt Node.js memory. How to find exposed runtimes, block risky paths and hunt for signs of abuse. #node2shell #nodejs #cve-2026-111497 #threat-hunting #detection-engineering #container-security #patching
cybersecurity October 23, 2026 PHP2Shell: The PHP Flaws Under Attack and What to Do Now PHP2Shell (CVE-2026-109618, CVE-2026-109619) enables unauthenticated RCE on most PHP servers. Affected versions, detection signals and a patch checklist. #php2shell #php #rce #vulnerability-management #web-security #patching #ecommerce
blog October 11, 2024 Welcome to the OffensioX Blog At OffensioX, we empower individuals and organizations with the knowledge and tools to navigate the ever-evolving digital landscape. #welcome #cybersecurity
cybersecurity October 10, 2024 Understanding the Basics of Cybersecurity Threats In this blog, we explore the most common cybersecurity threats you should be aware of and how to safeguard against them. #cybersecurity #threats #protection
