Ken Underhill

The Broadside Mirai variant exploits vulnerable maritime DVRs to gain stealthy access and threaten global shipping.

SAP has issued new security notes and patches for vulnerabilities that could enable code execution and system compromise.

A flaw in Cacti’s SNMP handling lets attackers execute arbitrary system commands.

A Splunk Windows flaw lets local users overwrite protected files and escalate to SYSTEM.

Arizona’s lawsuit claims Temu’s popular app acts like spyware and harvests sensitive device data.

Research suggests Indonesia’s massive gambling network may be an APT-level operation using large-scale, stealthy infrastructure.

React2Shell exposes critical flaws that let attackers run code on millions of apps.

PromptPwnd shows how simple prompt injections can let attackers compromise GitHub Actions and leak sensitive data.

India now requires all phones to ship with an undeletable government security app, raising privacy and security concerns.

Kohler’s smart toilet camera claims end-to-end encryption, but its design still exposes sensitive user data.

The Aisuru botnet’s massive DDoS assault marks a new era in which hyper-volumetric attacks are both accessible and harder to defend.

Modern GRC pressures are outpacing manual processes, making automation essential for staying compliant and secure.