End of Life Plan for RFC 6962 Certificate Transparency Logs
Update, August 18, 2025
We have updated the read-only and shutdown dates to ensure that our new Static CT API logs are fully trusted by...
Elastic Security: Announcing Agentic Query validation, Attack Discovery persistence, and automated scheduling and actions
With the latest updates to Attack Discovery and Elastic AI Assistant, customers can accelerate detection, reduce manual effort, and gain deeper insight into their...
[R1] Tenable Identity Exposure Versions 3.93.2 and 3.77.13 Fix One Vulnerability
Tenable Identity Exposure Versions 3.93.2 and 3.77.13 Fix One Vulnerability Arnie Cabral Wed, 08/06/2025 - 10:48
Tenable Identity Exposure leverages third-party software to...
Citrix Bleed 2
FortiGuard Labs has observed a sharp increase in exploitation attempts targeting the 'Citrix Bleed 2' vulnerability since July 28, 2025. Telemetry indicates activity has...
SparkRAT: Exploiting Architectural Weaknesses in Open-Source Offensive Tools
Persistent trend in open-source offensive tooling & implications for defenders - Read more
OCSP Service Has Reached End of Life
Today we turned off our Online Certificate Status Protocol (OCSP) service, as announced in December of last year. We stopped including OCSP URLs in...
Legal aid cyber-attack has pushed sector towards collapse, say lawyers
Barristers report going unpaid and cases being turned away amid fears firms will desert legal aid work altogetherLawyers have warned that a cyber-attack on...
Microsoft SharePoint Zero-day Attack
FortiGuard Labs has detected and successfully blocked hundreds of exploitation attempts targeting a newly discovered zero-day vulnerability chain in on-premises Microsoft SharePoint servers. This...
Backdoors & Breaches gameplay guide
A gameplay guide to share the new Datadog expansion pack of Backdoors & Breaches, including how to play and starter scenarios. - Read...
Datadog guide to Hacker Summer Camp 2025
Get ready to take on Hacker Summer Camp with our guide on planning, prepping, and schedules for Datadog events. - Read more
Latest article
Chromium: CVE-2026-2319 Race in DevTools
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see (https://chromereleases.googleblog.com/2024 ) for more information. -...
Substack Breach May Have Leaked Nearly 700,000 User Details Online
Substack says hackers accessed user emails, phone numbers, and internal metadata in October 2025, with a database of 697,313 records later posted online.
The post...
Cryptojacking Campaign Exploits Driver to Boost Monero Mining
Cryptojacking campaign used pirated software to deploy a persistent XMRig miner with stealth tactics - Read more
The Phone is Listening: A Cold War–Style Vulnerability in Modern VoIP
I don’t know about you, but when I think about “critical vulnerabilities,” I usually picture ransomware, data theft, or maybe a server falling over...
