Ken Underhill

Microsoft Teams guest access can expose users to phishing and malware by placing them in external tenants with no security protections.

A breach at SitusAMC exposed data from over 100 financial institutions, heightening concerns about third-party risk in banking.

A hidden WebAssembly bug in Firefox exposed 180 million users to potential code execution.

A critical SonicOS SSLVPN flaw lets remote attackers crash SonicWall firewalls without authentication.

Experts say the FCC’s rollback of cyber rules leaves U.S. telecom networks exposed to escalating China-linked espionage threats.

Operation WrtHug has hijacked tens of thousands of ASUS routers for global espionage.

A severe SCIM vulnerability in Grafana allows for user and admin impersonation.

“The Gentlemen” ransomware gang is rapidly becoming one of 2025’s most dangerous threats.

A hidden MCP API in Comet let extensions execute local commands on user devices.

The UK, US, and Australia sanctioned Media Land, a Russian network enabling major cyberattacks.

Amazon warns that nation-state hackers are now using cyber intrusions to enable real-world missile targeting and physical strikes.

CrowdStrike found that political trigger words can cause DeepSeek-R1 to generate insecure code, raising vulnerability rates by nearly 50%.