# nexatg.com

> Telecom · Developer Outsourcing · Infrastructure · Cyber Security


## Posts

- [The Current Landscape of OAuth Attacks](https://nexatg.com/the-current-landscape-of-oauth-attacks/): Unit 42 explores modern OAuth threats and actionable steps organizations can take to protect their environments. The post The Current Landscape of OAuth Attacks appeared first on Unit…
- [Technical Advisory: PHP2Shell Pre-Auth RCE (CVE-2026-109618, CVE-2026-109619)](https://nexatg.com/technical-advisory-php2shell-pre-auth-rce-cve-2026-109618-cve-2026-109619/): [CRITICAL] | CVSS v4.0 9.2 | No exploitation observed by Bitdefender | Patch immediately
- [As AI Risks Grow, Insurers Split on Covering the Damage](https://nexatg.com/as-ai-risks-grow-insurers-split-on-covering-the-damage/): Some build specialized agentic AI coverage, while major carriers quietly exclude it — leaving enterprises exposed without their knowledge.
- [Operation Serengeti III: Three Years of Collaboration Against Cybercrime](https://nexatg.com/operation-serengeti-iii-three-years-of-collaboration-against-cybercrime/): Fortinet examines Operation Serengeti III and three years of collaboration with INTERPOL and the World Economic Forum Cybercrime Atlas to disrupt cybercrime and recover illicit proceeds.
- [Black Hat MEA 2026 — Riyadh](https://nexatg.com/black-hat-mea-2026-riyadh/): The region’s largest cyber security event, 1–3 December at the Riyadh Exhibition & Convention Centre, Malham.
- [AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise](https://nexatg.com/ai-driven-large-scale-nation-state-campaign-using-artex-enables-supply-chain-compromise/): Storm-0940 used ARTEX agentic AI to accelerate a ConnectWise supply chain compromise, enabling application credential abuse across Microsoft 365 environments. The post AI-driven, large-scale nation-state campaign using ARTEX…
- [PHP2Shell: How to Protect Your Server](https://nexatg.com/php2shell-how-to-protect-your-server/): Two critical vulnerabilities in PHP allow remote code execution on the server without authentication. We explain who’s at risk, and how to update.
- [What’s New in GravityZone October 2026 (v 6.78)](https://nexatg.com/whats-new-in-gravityzone-october-2026-v-6-78/): Bitdefender rolled out new functionality in Bitdefender GravityZone, a unified cybersecurity platform that provides prevention, protection, detection, and response capabilities for organizations of all sizes. These features, aligned…
- [Veeam Extends Our #1 Market Share in Data Protection Software ](https://nexatg.com/veeam-extends-our-1-market-share-in-data-protection-software/): Market share is a strange thing to celebrate. Customers care whether you can get them back to business when something goes wrong. Partners care whether you make them…
- [Fortinet Recognized by Crime Stoppers International for Cybersecurity Leadership](https://nexatg.com/fortinet-recognized-by-crime-stoppers-international-for-cybersecurity-leadership/): At the recent Crime Stoppers International (CSI) Global Summit, Fortinet received CSI's 2026 Global Annual Cybersecurity Leadership Award.
- [“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities](https://nexatg.com/next-exploit-opportunities-how-a-threat-actor-used-ai-to-help-plan-and-execute-multiple-types-of-cybercrime-activities/): An investigation into a threat actor bypassing AI safety controls to coordinate credential theft, VoIP fraud planning, and database exfiltration. The post “Next Exploit Opportunities”: How a Threat…
- [Fortinet Releases Security Hardening Release for Multiple Products](https://nexatg.com/fortinet-releases-security-hardening-release-for-multiple-products/): Fortinet announces frontier AI hardening releases for a range of products including FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator.
- [Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)](https://nexatg.com/proof-of-concept-exploit-released-for-php-vulnerabilities-cve-2026-109618-cve-2026-109619/)
- [Web App Owners – You’re on Notice. Your Low-Hanging Fruit Just Got Lower](https://nexatg.com/web-app-owners-youre-on-notice-your-low-hanging-fruit-just-got-lower/): Recent incident response investigations reveal how AI-assisted attackers are chaining web application vulnerabilities, credential theft, privilege escalation, and lateral movement into autonomous intrusion workflows.
- [Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)](https://nexatg.com/active-exploitation-of-may-2026-pan-os-cve-2026-0257-updated-october-20/): Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257. The post Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October…
- [Introducing Amazon ECS Gateway: A fully-managed ingress solution for ECS services](https://nexatg.com/introducing-amazon-ecs-gateway-a-fully-managed-ingress-solution-for-ecs-services/): Try Amazon ECS Gateway, a new account-level resource that simplifies ingress networking for containerized workloads by dynamically provisioning and managing the necessary infrastructure on your behalf, with all…
- [AI doxing tools: how online surveillance technology has changed](https://nexatg.com/ai-doxing-tools-how-online-surveillance-technology-has-changed/): How AI helps collect data, deanonymize users, and link their accounts — and what to do to protect yourself from doxing and harassment.
- [Cairo ICT 2026 — meet NexaTG in New Cairo](https://nexatg.com/cairo-ict-2026-meet-nexatg-in-new-cairo/): Egypt’s national technology exhibition returns 8–11 November. Book a meeting with our telecom, outsourcing and security teams.
- [BRONZE SANDCASTLE deploys modified Meterpreter shells](https://nexatg.com/bronze-sandcastle-deploys-modified-meterpreter-shells/): The China-based threat group uses DLL sideloading in these attacks
- [Why Incident Response Demand Will Grow Faster than Expected](https://nexatg.com/why-incident-response-demand-will-grow-faster-than-expected/): A perspective on AI-enabled attacker scale, defender capacity, and the growing need for experienced responders.
- [SMB protection from cyberattacks: weak spots and how to fix them](https://nexatg.com/smb-protection-from-cyberattacks-weak-spots-and-how-to-fix-them/): We break down a real-world breach of a cloud ERP system, and explain how to avoid the key mistakes.
- [AWS Weekly Roundup: AWS Lambda Web Functions, Amazon S3 on the Vercel Marketplace, and more (October 19, 2026)](https://nexatg.com/aws-weekly-roundup-aws-lambda-web-functions-amazon-s3-on-the-vercel-marketplace-and-more-october-19-2026/): Nothing last week added a new kind of compute. What it did instead was shorten the distance between the code you already have and that code being live.…
- [Fortinet Security Operations Summit: Modernizing Cyber Defense in the AI Era](https://nexatg.com/fortinet-security-operations-summit-modernizing-cyber-defense-in-the-ai-era/): Join the Fortinet Security Operations Summit November 4–5 to explore AI-powered threats, agentic AI, and practical strategies for modernizing security operations
- [Agents are your newest insiders. Security must move at their speed. ](https://nexatg.com/agents-are-your-newest-insiders-security-must-move-at-their-speed/): New capabilities in Microsoft 365 E7 and Project Perception help organizations contain agent risk and adapt protection continuously. The post Agents are your newest insiders. Security must move at…
- [Beyond the mailbox: Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion](https://nexatg.com/beyond-the-mailbox-graph-reconnaissance-and-servicenow-user-enumeration-in-a-modern-identity-intrusion/): No novelty required to be effective
- [ConnectWise Cloud Backup application abused in cross-tenant token sweep](https://nexatg.com/connectwise-cloud-backup-application-abused-in-cross-tenant-token-sweep/): Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants
- [Autonomy Is Only Safe When It Is Reversible](https://nexatg.com/autonomy-is-only-safe-when-it-is-reversible/): Somewhere in your organization, an AI agent has permission to do real work. It reads records, updates systems, moves data, and finishes tasks without asking anyone, which is…
- [Is Your Data Actually Ready for AI? A Readiness Check by Maturity Level](https://nexatg.com/is-your-data-actually-ready-for-ai-a-readiness-check-by-maturity-level/): AI adoption has moved fast. In Veeam’s Data & AI Trust Maturity Model research study, 95% of organizations say they’ve already deployed AI in their environment. The data…
- [Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026](https://nexatg.com/top-5-initial-access-threat-vectors-observed-by-unit-42-in-september-2026/): Unit 42 details the top initial access vectors adversaries use to breach organizations, led by edge exploits, credential abuse and phishing The post Top 5 Initial Access Threat…
- [Managing open-weight model risk in enterprise deployments](https://nexatg.com/managing-open-weight-model-risk-in-enterprise-deployments/): New whitepaper from Microsoft and NVIDIA helps enterprises manage open-weight AI model risks with a shared taxonomy, evaluations, and controls. The post Managing open-weight model risk in enterprise…
- [AI-Powered Espionage Campaign Targets Government Linux Infrastructure](https://nexatg.com/ai-powered-espionage-campaign-targets-government-linux-infrastructure/): Our analysis an AI-powered espionage campaign targeting government Linux infrastructure with custom malware, web shells, and advanced credential theft. The post AI-Powered Espionage Campaign Targets Government Linux Infrastructure…
- [Backup Software Comparison for Hybrid SMB Environments: How to Protect Servers, Cloud, and SaaS Without Tool Sprawl](https://nexatg.com/backup-software-comparison-for-hybrid-smb-environments-how-to-protect-servers-cloud-and-saas-without-tool-sprawl/): Your servers are backed up. Your laptops are backed up. Microsoft 365 is probably covered by that add-on someone bought two years ago but nobody has logged into…
- [Technical Advisory: AhsayCBS Exploitation Chain (CVE-2026-105133, CVE-2026-105134)](https://nexatg.com/technical-advisory-ahsaycbs-exploitation-chain-cve-2026-105133-cve-2026-105134/): [CRITICAL] | CVSS 10.0 (CVE-2026-105134, per VulDB) | Active exploitation confirmed, listed in CISA KEV | Patch immediately
- [How to write a resume with AI: tips and a ready-made prompt](https://nexatg.com/how-to-write-a-resume-with-ai-tips-and-a-ready-made-prompt/): Learn how to write a resume with AI, protect your personal data, and improve your chances of catching a recruiter’s attention — with practical tips and a ready-made…
- [Strengthening Defense Readiness through OT Security](https://nexatg.com/strengthening-defense-readiness-through-ot-security/): New NSA guidance helps defense organizations strengthen OT security with zero-trust principles that protect critical infrastructure and mission readiness.
- [Who’s Watching AI? The Visibility Gap Security Teams Need to Close](https://nexatg.com/whos-watching-ai-the-visibility-gap-security-teams-need-to-close/): AI adoption isn't waiting for security teams.
- [Sophos ITDR expands identity protection for the AI era](https://nexatg.com/sophos-itdr-expands-identity-protection-for-the-ai-era/): Sophos ITDR now delivers deeper AI identity visibility, expanded Microsoft support, faster response, and seamless deployment.
- [Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant](https://nexatg.com/unit-42-uncovers-peerstitch-a-stealthy-fortigate-implant/): We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware. The post Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate…
- [Amazon S3 is now available on the Vercel Marketplace and v0 by Vercel](https://nexatg.com/amazon-s3-is-now-available-on-the-vercel-marketplace-and-v0-by-vercel/): Amazon Simple Storage Service (Amazon S3), including Amazon S3 Tables and Amazon S3 Vectors, is natively available on the Vercel Marketplace and v0 by Vercel.
- [Highlights of Microsoft’s October Patch Release](https://nexatg.com/highlights-of-microsofts-october-patch-release/): The update collection published by Microsoft on October 13, 2026 includes a total of 1,414 patches. Here’s what you need to know.
- [Think Before You Click: Phishing in the AI Era](https://nexatg.com/think-before-you-click-phishing-in-the-ai-era/): AI is making phishing more convincing and scalable, requiring employees to verify identity and context instead of relying on familiar warning signs.
- [Strengthening OT Security with the Fortinet AI-Enabled OT Security Platform](https://nexatg.com/strengthening-ot-security-with-the-fortinet-ai-enabled-ot-security-platform/): Explore how the Fortinet OT Security Platform combines AI-enabled security, rugged connectivity, and certified protections to strengthen resilience
- [The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime](https://nexatg.com/the-hidden-network-inside-the-phishing-infrastructure-ecosystem-powering-global-cybercrime/): Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tracked as Storm-2990), and an illicit marketplace (tracked as Storm-3119) selling tools and infrastructure for…
- [The Sovereign Advantage: Why MSPs Who Move First Will Control the Board](https://nexatg.com/the-sovereign-advantage-why-msps-who-move-first-will-control-the-board/): In chess, the first player to move gains more than a step. They shape how the board develops from that point on. Digital sovereignty works the same way.…
- [The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk](https://nexatg.com/the-noise-inside-the-network-how-an-unsophisticated-attack-exposed-a-third-party-risk/): Unit 42 dissects a cyberattack targeting a European bank's IT infrastructure, delivering concrete defense strategies to help organizations detect and counter comparable threats. The post The Noise Inside…
- [AWS Weekly Roundup: Prime Day 2026 by the numbers, Claude Haiku 5.5, Amazon Nova 2.5 Sonic, and more (October 13, 2026)](https://nexatg.com/aws-weekly-roundup-prime-day-2026-by-the-numbers-claude-haiku-5-5-amazon-nova-2-5-sonic-and-more-october-13-2026/): Some numbers are hard to picture until you sit with them for a moment. Last week we published the Prime Day 2026 metrics, and the one that stuck…
- [InjectEave: an attack that intercepts analog audio signals](https://nexatg.com/injecteave-an-attack-that-intercepts-analog-audio-signals/): Researchers in Hong Kong have developed a method to remotely capture the audio signal from headphones by picking up electromagnetic emissions.
- [Announcing AWS Lambda Web Functions](https://nexatg.com/announcing-aws-lambda-web-functions/): AWS Lambda Web Functions is a serverless compute primitive that runs your HTTP framework natively, delivering fast, consistent responses through multi-concurrent execution and automated global distribution.
- [Why B2B2X is reshaping telecom BSS](https://nexatg.com/why-b2b2x-is-reshaping-telecom-bss/): Operators are moving from selling connectivity to orchestrating partner ecosystems — and legacy BSS was never built for that.
- [Ransomware groups shift tactics: data theft instead of encryption](https://nexatg.com/ransomware-groups-shift-tactics-data-theft-instead-of-encryption/): Attackers are increasingly ditching ransomware in favor of stealing company data and threatening to leak it. Let’s look at why this is happening and how businesses can protect…
- [Post-quantum authentication: Why organizations should start testing certificate ecosystems now](https://nexatg.com/post-quantum-authentication-why-organizations-should-start-testing-certificate-ecosystems-now/): Prepare for post-quantum authentication by testing certificate ecosystems now. Learn how Microsoft’s PQC TLS Pilot Program helps advance future readiness. The post Post-quantum authentication: Why organizations should start…
- [The Cybersecurity Optimism Gap: When Leaders and Frontline Teams See Different Realities](https://nexatg.com/the-cybersecurity-optimism-gap-when-leaders-and-frontline-teams-see-different-realities/): Security leaders and frontline practitioners can look at the same organization, controls, and dashboards, and reach different conclusions about how well cybersecurity is working.
- [Evolution of Web3 in Cloud Supply Chain Attacks](https://nexatg.com/evolution-of-web3-in-cloud-supply-chain-attacks/): Unit 42 details how threat actors leverage Web3 infrastructure and open-source supply chain attacks to breach enterprise cloud environments The post Evolution of Web3 in Cloud Supply Chain…
- [3 lessons from frontier AI vulnerability research](https://nexatg.com/3-lessons-from-frontier-ai-vulnerability-research/): Read how How Microsoft Security's FORGE Lab is scaling vulnerability research from Windows to the Linux kernel. The post 3 lessons from frontier AI vulnerability research appeared first…
- [Fortinet and Aramco sign MoU to strengthen industrial cybersecurity in Saudi Arabia](https://nexatg.com/fortinet-and-aramco-sign-mou-to-strengthen-industrial-cybersecurity-in-saudi-arabia/): The two companies will explore OT security, localised cybersecurity services and talent programmes in the Kingdom.
- [All the numbers: Amazon Prime Day 2026 powered by AWS](https://nexatg.com/all-the-numbers-amazon-prime-day-2026-powered-by-aws/): Amazon Prime Day 2026 was exclusively for Prime members and ran June 23–26, 2026 with millions of deals across more than 35 categories. As part of our annual…
- [CISO perspectives on managing vulnerability risks in the age of AI](https://nexatg.com/ciso-perspectives-on-managing-vulnerability-risks-in-the-age-of-ai/): Learn how CISOs can mitigate cybersecurity risks and increase resilience in the age of AI-powered vulnerability management. The post CISO perspectives on managing vulnerability risks in the age…
- [Blinder Tunnel Campaign Targets Iraqi Infrastructure](https://nexatg.com/blinder-tunnel-campaign-targets-iraqi-infrastructure/): Analysis of Blinder Tunnel, an Iran-nexus campaign using fake Dubai Airports recruitment lures and GitHub C2 malware to target critical infrastructure. The post Blinder Tunnel Campaign Targets Iraqi…
- [Bitdefender Threat Debrief | October 2026](https://nexatg.com/bitdefender-threat-debrief-october-2026/): Operation KillSwitch Halts KillSec’s Ransomware Activity
- [Your Security Stack Has AI, but Can Your Team Use It?](https://nexatg.com/your-security-stack-has-ai-but-can-your-team-use-it/): AI is rapidly becoming essential for defenders. But adding AI to a security stack doesn't automatically make security better.
- [AWS Weekly Roundup: Amazon Bedrock Managed Agents powered by OpenAI, Q3 service availability updates, Kiro workflows, and more (October 5, 2026)](https://nexatg.com/aws-weekly-roundup-amazon-bedrock-managed-agents-powered-by-openai-q3-service-availability-updates-kiro-workflows-and-more-october-5-2026/): Last week, we announced a public preview of Amazon Bedrock Managed Agents powered by OpenAI, built on a customized version of OpenAI’s Agents API engineered to be AWS-native…
- [Dedicated team or staff augmentation? Choosing the right outsourcing model](https://nexatg.com/dedicated-team-or-staff-augmentation-choosing-the-right-outsourcing-model/): Four engagement models, when each one fits, and the questions to ask before you sign.
- [Fortinet to Announce Third Quarter 2026 Financial Results](https://nexatg.com/fortinet-to-announce-third-quarter-2026-financial-results/)
- [Bitdefender Supported Operation KillSwitch: What the KillSec Takedown Changes for Defenders](https://nexatg.com/bitdefender-supported-operation-killswitch-what-the-killsec-takedown-changes-for-defenders/): Europol published the results of Operation KillSwitch on the first day of October 2026, following a targeted action against the KillSec ransomware group. The day prior, law enforcement…
- [Announcing AWS Well-Architected Agent, an AI-powered intelligence to optimize your cloud environment (preview)](https://nexatg.com/announcing-aws-well-architected-agent-an-ai-powered-intelligence-to-optimize-your-cloud-environment-preview/): Introducing the public preview of AWS Well-Architected Agent, an AI-powered service that analyzes your AWS environment to deliver targeted, contextual recommendations for improving your applications' cost, security, performance,…
- [Preparing governments for an era of interconnected cyber risk](https://nexatg.com/preparing-governments-for-an-era-of-interconnected-cyber-risk/): According to this year’s Microsoft Digital Defense Report, government agencies and services were the sector most impacted by cyber threats in 2026, accounting for 27% of observed activity,…
- [Insights from the 2026 Microsoft Digital Defense Report ](https://nexatg.com/insights-from-the-2026-microsoft-digital-defense-report/): Read highlights from the 2026 Microsoft Digital Defense Report, which reflects a security environment that continues to grow more interconnected. The post Insights from the 2026 Microsoft Digital…
- [Amazon S3 Tables now support all Apache Iceberg V3 data types](https://nexatg.com/amazon-s3-tables-now-support-all-apache-iceberg-v3-data-types/): Amazon S3 Tables now support all data types in the Apache Iceberg V3 spec, along with column default values, deletion vectors, and row lineage. Upgrade existing V2 tables…
- [Amazon S3 Vectors now supports metadata pre-filtering for higher recall on filtered searches](https://nexatg.com/amazon-s3-vectors-now-supports-metadata-pre-filtering-for-higher-recall-on-filtered-searches/): Amazon S3 Vectors now supports metadata pre filtering, delivering up to 5x higher recall on filtered searches. Filters evaluate before similarity search so scoped queries return more relevant…
- [Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)](https://nexatg.com/threat-brief-netscaler-zero-days-cve-2026-88771-and-cve-2026-88772-exploited-in-the-wild-updated-september-30/): Unit 42 is aware of possible 0-day activity against NetScaler devices. Citrix reports CVE-2026-88771, CVE-2026-88772 have been exploited in the wild. The post Threat Brief: NetScaler Zero Days…
- [Amazon Aurora PostgreSQL now supports direct querying of Apache Iceberg and Parquet data in your data lake](https://nexatg.com/amazon-aurora-postgresql-now-supports-direct-querying-of-apache-iceberg-and-parquet-data-in-your-data-lake/): Amazon Aurora PostgreSQL now lets you directly query Apache Iceberg and Parquet data stored in your data lake alongside live operational data—no ETL pipelines required. Powered by DuckDB…
- [Celebrating Our Newest AWS Heroes – September 2026](https://nexatg.com/celebrating-our-newest-aws-heroes-september-2026/): Today, we’re excited to introduce the newest members of the AWS Heroes program. AWS Heroes are a vibrant, worldwide group of AWS experts who go above and beyond…
- [OperTraitors: How Kubernetes Operators Betray Your Security Posture](https://nexatg.com/opertraitors-how-kubernetes-operators-betray-your-security-posture/): We introduce OperTraitor, a tool to audit privileges of Kubernetes operators, identify excessive RBAC risks, and secure non-human identities. The post OperTraitors: How Kubernetes Operators Betray Your Security…
- [Your Cybersecurity Review Should Lead to Action: Here’s the New Playbook](https://nexatg.com/your-cybersecurity-review-should-lead-to-action-heres-the-new-playbook/): A cybersecurity review should deliver more than a list of gaps.
- [AWS Weekly Roundup: GPT-6 Sol and Luna, Claude Opus 5.5 on Amazon Bedrock, Strands harness, and more (September 28, 2026)](https://nexatg.com/aws-weekly-roundup-gpt-6-sol-and-luna-claude-opus-5-5-on-amazon-bedrock-strands-harness-and-more-september-28-2026/): If there’s one theme that defined last week, it’s choice. The frontier models keep arriving, and the interesting question is no longer just “how smart is it?” but…
- [Zero Trust in practice: a 90-day starting plan](https://nexatg.com/zero-trust-in-practice-a-90-day-starting-plan/): Zero Trust is a journey, not a product. Here is a pragmatic first 90 days.
- [Introducing AI Visibility and Control](https://nexatg.com/introducing-ai-visibility-and-control/): A user opens a browser tab, pastes data into a chat assistant, and nothing is installed. A developer adds a coding assistant as an editor extension, and nothing shows…
- [Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch](https://nexatg.com/hackers-target-critical-oracle-e-business-suite-rce-flaw-days-after-security-patch/): Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question…
- [China-Linked Hackers Exploit PHP2Shell to Root Firewalls](https://nexatg.com/china-linked-hackers-exploit-php2shell-to-root-firewalls/): The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization. The post China-Linked Hackers Exploit PHP2Shell to Root Firewalls appeared first on…
- [Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers](https://nexatg.com/critical-16-year-old-uefi-flaw-can-run-code-before-secure-boot-on-network-booting-servers/): A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a…
- [Long-Hidden Flaws Patched in EPICS Research Facility Control Software](https://nexatg.com/long-hidden-flaws-patched-in-epics-research-facility-control-software/): Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs. The post Long-Hidden Flaws Patched in EPICS Research…
- [Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise](https://nexatg.com/secrets-management-firm-infisical-valued-at-600-million-after-40-million-raise/): The company will use the Series B funds to expand its platform for securing AI agents’ access to sensitive systems. The post Secrets Management Firm Infisical Valued at…
- [Nefilim and Hive ransomware affiliate gets 70 months in prison](https://nexatg.com/nefilim-and-hive-ransomware-affiliate-gets-70-months-in-prison/): A Ukrainian national was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals, government entities, and high-revenue businesses worldwide between 2018 and 2021.…
- [Hackers Start Probing Fresh Oracle EBS Vulnerability](https://nexatg.com/hackers-start-probing-fresh-oracle-ebs-vulnerability/): CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution. The post Hackers Start Probing Fresh Oracle EBS Vulnerability appeared first on SecurityWeek.
- [CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts](https://nexatg.com/cisa-warns-of-node2shell-exploitation-as-honeypots-log-attack-attempts/): CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit. The post CISA Warns of Node2Shell…
- [Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits](https://nexatg.com/anthropics-unreleased-ai-model-chains-flaws-into-working-chrome-safari-windows-and-linux-exploits/): An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest…
- [Multicloud Backup Without the Silos](https://nexatg.com/multicloud-backup-without-the-silos/): Most multicloud environments weren't planned. They grew with one smart decision at a time: AWS here, Azure there, and on-premises where it made the most sense. The post…
- [FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering](https://nexatg.com/fbi-seizes-virtualine-domain-over-alleged-criminal-hosting-and-bitcoin-money-laundering/): The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a bulletproof hosting provider (BPH) named Virtualine. The move was in response…
- [Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach](https://nexatg.com/japans-gmo-offers-1-million-bounty-to-catch-hackers-behind-fx-trading-cloud-breach/): Japan's GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay…
- [Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature](https://nexatg.com/third-serengeti-sweep-tops-1400-arrests-as-investigations-mature/): Interpol's annual Operation Serengeti, now on its third iteration, led to 1,462 arrests across 20 African countries and the US, recovering $105 million in stolen funds.
- [Japan's GMO urges customers to shut down PCs amid ransomware threat](https://nexatg.com/japans-gmo-urges-customers-to-shut-down-pcs-amid-ransomware-threat/): The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company's Onamae Desktop Cloud…
- [OpenAI's GPT-6.1 Terra is safer overall, but shows more destructive-action flags in tests](https://nexatg.com/openais-gpt-6-1-terra-is-safer-overall-but-shows-more-destructive-action-flags-in-tests/): OpenAI confirmed GPT-6.1 Terra is safer overall than some of its older models, but its safety testing also found other problems. [...]
- [3 Frameworks to Protect CISOs & Orgs Against AI Liability](https://nexatg.com/3-frameworks-to-protect-cisos-orgs-against-ai-liability/): Cyber leaders can get ahead of AI liability with rigorous documentation, transparency, and smart contract negotiations with AI vendors.
- [External Teams Chats Anchor 15-Minute Malware Delivery](https://nexatg.com/external-teams-chats-anchor-15-minute-malware-delivery/): Main bombing sis getting a new look with a wide-scale, ongoing social engineering campaign that might be tied to the Black Basta ransomware gang.
- [SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack](https://nexatg.com/sboms-alone-cant-reveal-the-scope-of-a-supply-chain-attack/): A recent Shai-Hulud attack shows defenders need real-time visibility into production code and affected services to respond to supply chain compromises.
- [Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills](https://nexatg.com/beware-the-slasher-ai-could-kill-off-cybersecurity-pros-skills/): Nathan Hamiel outlines potential SecOps horror in the AI midst, as core technical capabilities go the way of reading an atlas or remembering phone numbers.
- ['Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants](https://nexatg.com/aokigahara-stealer-targets-developer-keyrings-ai-assistants/): The malware's focus on AI tools expands the traditional infostealer playbook to expose a forest of AI sessions, sensitive business data, and developer infrastructure from a single compromised…
- [Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws](https://nexatg.com/tailscale-rushes-patches-after-uncoordinated-disclosure-of-tailworm-flaws/): Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released. The post Tailscale Rushes Patches After…
- [Use Fortinet Solutions to Secure Enterprise AI Workloads on Oracle Cloud Infrastructure](https://nexatg.com/use-fortinet-solutions-to-secure-enterprise-ai-workloads-on-oracle-cloud-infrastructure/): Fortinet solutions secure Oracle enterprise AI workloads, combining AI guardrails, governance, and cost control with Oracle Cloud Infrastructure services.
- [Tailscale warns of SSH flaws allowing root privilege escalation](https://nexatg.com/tailscale-warns-of-ssh-flaws-allowing-root-privilege-escalation/): The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root privileges, and more. [...]
- [The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest](https://nexatg.com/the-huntress-tragic-quadrant-ranking-threats-hitting-businesses-hardest/): Attackers are increasingly abusing legitimate IT tools, Microsoft 365 sessions, and everyday workflows to compromise businesses without triggering traditional defenses. Huntress Labs ranks the threats hitting organizations hardest,…
- [Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk](https://nexatg.com/vendor-key-leak-puts-data-of-238000-denver-health-plan-members-at-risk/): A leaked SquareML access key could have been used to access a database containing personal and health information. The post Vendor Key Leak Puts Data of 238,000 Denver…
- [HPE Patches Dozens of Critical Flaws in Networking Products](https://nexatg.com/hpe-patches-dozens-of-critical-flaws-in-networking-products/): Eight max-severity security defects could lead to remote code execution and authentication bypass. The post HPE Patches Dozens of Critical Flaws in Networking Products appeared first on SecurityWeek.
- [Fortinet Expands Unified SASE to Simplify Microbranch Security](https://nexatg.com/fortinet-expands-unified-sase-to-simplify-microbranch-security/): Fortinet announced the FortiLink SASE service, giving organizations a simpler way to secure small branch office, remote facilities, and other distributed locations without requiring a dedicated on-site firewall.
- [Securing Thin Edge Locations Doesn’t Need to be Complicated](https://nexatg.com/securing-thin-edge-locations-doesnt-need-to-be-complicated/): Fortinet offers easy solutions to secure the thin edge that can be leveraged as appropriate for the situation. Learn more.
- [Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens](https://nexatg.com/microsoft-authenticator-flaw-let-permissionless-android-apps-steal-work-account-tokens/): Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams,…
- [Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key](https://nexatg.com/keystone-to-destroy-18835-hardware-wallets-after-hackers-steal-device-verification-key/): An attacker who gained access to Keystone's website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement on October 26.…
- [AI-Generated Fake Login Pages Are Making Account Takeovers Easier](https://nexatg.com/ai-generated-fake-login-pages-are-making-account-takeovers-easier/): Fake login pages are nothing new, but generative AI is making them easier to build and more convincing. Attackers can recreate familiar login screens, impersonate trusted brands and…
- [Apple backports CoreGraphics zero-day patches to older iPhones](https://nexatg.com/apple-backports-coregraphics-zero-day-patches-to-older-iphones/): ​Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in "extremely sophisticated" targeted attacks on iOS devices. [...]
- [Your Attack Surface Is Growing Faster Than Your Team Can Respond](https://nexatg.com/your-attack-surface-is-growing-faster-than-your-team-can-respond/): Security teams cannot keep responding faster forever. As AI helps attackers accelerate reconnaissance and exploitation, organizations need to reduce the opportunities that make attacks possible in the first…
- [AI Agent Safety Needs Boundaries and Trusted, Recoverable Data](https://nexatg.com/ai-agent-safety-needs-boundaries-and-trusted-recoverable-data/): For 20 years, the resilience question Veeam answered was simple: Can I recover? In the agentic AI era, the question now is whether you can tell precisely what…
- [Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics](https://nexatg.com/cybersecurity-issue-forces-a-major-new-mexico-hospital-to-divert-patients-and-close-clinics/): The University of New Mexico Health System told people not to show up at its main hospital in Albuquerque and canceled appointments at more than 30 clinics. The…
- [So Many AI Security Benchmarks, But None Tell the Whole Story](https://nexatg.com/so-many-ai-security-benchmarks-but-none-tell-the-whole-story/): Measuring AI model security gets complex fast — a growing patchwork of benchmarks targets different variables in the equation, but none replace testing against your own code and…
- [University of Copenhagen data breach exposes data of 525,000 people](https://nexatg.com/university-of-copenhagen-data-breach-exposes-data-of-525000-people/): The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people. [...]
- [Risks & Rewards: How AI Is Redefining the CISO's Role](https://nexatg.com/risks-rewards-how-ai-is-redefining-the-cisos-role/): Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.
- [Former pentester used ARTEX AI to steal 8.2 million data records](https://nexatg.com/former-pentester-used-artex-ai-to-steal-8-2-million-data-records/): South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the…
- [In-the-Wild Attack Abuses AI Agents' Trust in Markdown](https://nexatg.com/in-the-wild-attack-abuses-ai-agents-trust-in-markdown/): A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.
- [OpenAI launches GPT-6.1 Terra with 3x faster AI agents, 50% lower pricing](https://nexatg.com/openai-launches-gpt-6-1-terra-with-3x-faster-ai-agents-50-lower-pricing/): OpenAI has launched GPT-6.1 Terra, a new model focused on computer use, visual reasoning, coding, and everyday work, while costing significantly less than its larger models. [...]
- [Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI](https://nexatg.com/anthropic-files-for-potentially-the-biggest-ipo-ever-as-ceo-warns-of-risk-to-humanity-from-ai/): A string of hacking incidents by rogue AI agents also has raised fears the technology will slip free of human control to carry out harmful, life-threatening tasks. The…
- [DreamHost forces password resets in ongoing "incident"](https://nexatg.com/dreamhost-forces-password-resets-in-ongoing-incident/): DreamHost has forced password resets for email and FTP/SFTP users following an incident that disrupted connections to the File Manager interface. [...]
- [Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento](https://nexatg.com/hackers-infect-953-online-stores-with-scanner-evading-javascript-mostly-on-magento/): An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to Dutch e-commerce…
- ['Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets](https://nexatg.com/gheist-weaponizes-github-tokens-to-steal-cloud-secrets/): An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.
- [PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw](https://nexatg.com/php-issues-second-windows-security-update-in-five-days-to-fix-brotli-code-execution-flaw/): PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw…
- [Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches](https://nexatg.com/critical-http2shell-brotli-vulnerability-triggers-emergency-patches/): A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data. [...]
- [Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware](https://nexatg.com/attackers-use-microsoft-teams-it-support-scams-to-deploy-malware-and-ransomware/): Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use Microsoft Teams' external chat…
- [Microsoft releases emergency .NET patches for critical Brotli flaw](https://nexatg.com/microsoft-releases-emergency-net-patches-for-critical-brotli-flaw/): Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell. [...]
- [AWS Weekly Roundup: Amazon Polly Generative engine, TorchNeuron for Trainium, and more (October 26, 2026)](https://nexatg.com/aws-weekly-roundup-amazon-polly-generative-engine-torchneuron-for-trainium-and-more-october-26-2026/): A few weeks ago I presented to a small group of commercial and technology leaders from Brazilian agribusiness at the AWS office in São Paulo. My talk ran…
- [Industrial Vendors Check Products for PHP2Shell Vulnerabilities](https://nexatg.com/industrial-vendors-check-products-for-php2shell-vulnerabilities/): Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities. The post Industrial Vendors Check Products for PHP2Shell Vulnerabilities…
- [Genesys Hack Exposes Customer Data From Internal Systems](https://nexatg.com/genesys-hack-exposes-customer-data-from-internal-systems/): The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected. The post Genesys Hack Exposes Customer Data From Internal Systems appeared first on SecurityWeek.
- [Stolen AI Reasoning Could Help China Build Cheaper Rivals](https://nexatg.com/stolen-ai-reasoning-could-help-china-build-cheaper-rivals/): Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making it cheaper to distill a rival AI. The post Stolen AI…
- [⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More](https://nexatg.com/%e2%9a%a1-weekly-recap-this2shell-that2shell-everythings-an-rce-rogue-ai-supply-chain-chaos-and-more/): This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets,…
- [When an AI Agent Is the Incident, the Identity Record Is the Evidence](https://nexatg.com/when-an-ai-agent-is-the-incident-the-identity-record-is-the-evidence/): A new NIST, CISA, and NSA guide treats runaway agents as incidents to be rehearsed. The hard part of the response is answering whose authority the agent used,…
- [10 Software Security Practices Built for the Next 250 Years](https://nexatg.com/10-software-security-practices-built-for-the-next-250-years/): This Cybersecurity Awareness Month's theme, "Securing the Next 250," asks us to look beyond vulnerabilities and consider what will make our digital systems resilient for generations.
- [Chinese man extradited for role in $36 million cryptocurrency scam](https://nexatg.com/chinese-man-extradited-for-role-in-36-million-cryptocurrency-scam/): A Chinese national was arraigned in California after being extradited from the Netherlands for his alleged involvement in a cryptocurrency investment scam that stole nearly $37 million from…
- [Cybersecurity in Christopher Nolan’s The Odyssey](https://nexatg.com/cybersecurity-in-christopher-nolans-the-odyssey/): What Christopher Nolan’s The Odyssey can teach us about cybersecurity, and what risks watching the movie entails
- [PHP2Shell Exploitation Moves From Probes to Working Shells ](https://nexatg.com/php2shell-exploitation-moves-from-probes-to-working-shells/): Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on October 24. The post PHP2Shell Exploitation Moves From Probes to Working Shells …
- [Fortinet Expands AI Security with the FortiGuard Inline AI Security Service](https://nexatg.com/fortinet-expands-ai-security-with-the-fortiguard-inline-ai-security-service/): Today Fortinet announced the new FortiGuard Inline AI Security Service, delivering AI-specific inspection and guardrails to FortiGate customers through a cloud-delivered service.
- [Extending Network Security to AI Applications with FortiAIGate](https://nexatg.com/extending-network-security-to-ai-applications-with-fortiaigate/): FortiAIGate extends network security with AI guardrails that inspect prompts, responses, and tool calls to protect data and govern AI use.
- [953 Online Stores Infected in Long-Lasting Malware Campaign](https://nexatg.com/953-online-stores-infected-in-long-lasting-malware-campaign/): Small loader code injected into the stores served a payload to visitors or did nothing to avoid detection. The post 953 Online Stores Infected in Long-Lasting Malware Campaign…
- [Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes](https://nexatg.com/two-critical-wasmtime-flaws-could-let-malicious-webassembly-modules-escape-sandboxes/): Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it,…
- [Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts](https://nexatg.com/dutch-police-arrest-two-over-nfc-relay-attacks-that-drained-400000-from-bank-accounts/): The individuals called victims and persuaded them to install an app and scan their credit cards to loot their bank accounts. The post Dutch Police Arrest Two Over…
- [Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses](https://nexatg.com/between-alerts-what-attackers-do-in-the-spaces-ordinary-detection-misses/): Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a…
- [Kali Linux 2026.3 released with 6 new tools, desktop updates](https://nexatg.com/kali-linux-2026-3-released-with-6-new-tools-desktop-updates/): Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more. [...]
- [Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages](https://nexatg.com/node2shell-brotli-flaw-triggers-patching-across-microsoft-node-js-python-packages/): An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution. The post Node2Shell: Brotli Flaw Triggers Patching Across…
- [uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts](https://nexatg.com/ucreator-android-spyware-can-steal-telegram-2fa-passwords-and-clone-wechat-accounts/): A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It…
- [PHP2Shell security flaws now sucessfully exploited in the wild](https://nexatg.com/php2shell-security-flaws-now-sucessfully-exploited-in-the-wild/): Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild. [...]
- [Mythos 5 Ignored Real-World Harm in July Attack](https://nexatg.com/mythos-5-ignored-real-world-harm-in-july-attack/): The model engaged in severe overreach and dishonesty, creating fake identities and submitting malicious code on GitHub. The post Mythos 5 Ignored Real-World Harm in July Attack appeared…
- [Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations](https://nexatg.com/microsoft-365-token-replay-attacks-compromise-97-accounts-at-79-organizations/): Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to…
- [Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs](https://nexatg.com/gheist-uses-stolen-github-tokens-to-steal-private-repository-secrets-via-actions-logs/): An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting…
- [Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware](https://nexatg.com/malicious-file-in-downloads-folder-tries-to-trick-ai-coding-agent-into-installing-malware/): A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever Security said in a report…
- [The breachpocalypse is here](https://nexatg.com/the-breachpocalypse-is-here/): It's just hard to measure
- [Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers](https://nexatg.com/unpatched-tailscale-ssh-flaws-could-let-a-hacked-device-reach-root-on-other-servers/): A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published…
- [PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity](https://nexatg.com/php2shell-exploitation-attempts-continue-amid-suspected-n-korea-global-scanning-activity/): In an update, Palo Alto Networks Unit 42 said it's retracting its earlier assessment that the post-compromise activity targeting the European government agency involved the exploitation of the…
- [AI coding agents hijacked using AGENTS.md file in Downloads folder](https://nexatg.com/ai-coding-agents-hijacked-using-agents-md-file-in-downloads-folder/): Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package. [...]
- [GISEC Global 2027 — Dubai](https://nexatg.com/gisec-global-2027-dubai/): The Middle East’s cyber security exhibition at Dubai Exhibition Centre, Expo City — May 2027.
- [BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot](https://nexatg.com/blackx-uefi-bootkit-exploits-baton-drop-flaw-to-bypass-secure-boot/): A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious…
- [LEAP 2027 — Riyadh](https://nexatg.com/leap-2027-riyadh/): Global technology event in Riyadh, 12–15 April 2027 — cloud, AI, telecom and digital transformation.
- [Trust Is Not What It Seems — and Fraudsters Are Counting on It](https://nexatg.com/trust-is-not-what-it-seems-and-fraudsters-are-counting-on-it/): Threat actors don't need to rely on malware to breach organizations anymore. They're simply calling help desks and politely asking for access, with a little help from artificial…
- [Exposed to PHP2Shell? Cyber Experts Weigh in With Advice](https://nexatg.com/exposed-to-php2shell-cyber-experts-weigh-in-with-advice/): Fixing the critical PHP flaws is not as simple as clicking "Update." Here's how to assess your risk, and what you can do to protect yourself.
- [Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 25)](https://nexatg.com/threat-brief-critical-vulnerabilities-in-php-cve-2026-109618-cve-2026-109619-updated-october-25/): CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems. The post Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618,…
- [Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks](https://nexatg.com/inside-the-litellm-1-107-0-supply-chain-compromise-credential-theft-through-python-startup-hooks/): Microsoft Threat Intelligence analyzes the LiteLLM 1.107.0 compromise, including Python startup hooks, credential theft, remote code loading, detections, and mitigations. The post Inside the LiteLLM 1.107.0 supply chain…
- [AI Tools Are Generating Massive Attacks for Little Cost](https://nexatg.com/ai-tools-are-generating-massive-attacks-for-little-cost/): One campaign targets 105 sites using open-weight models; in another, public models gained full domain control for $12. Cyber-defense will have to change.
- [FortiSwitch AX9000G: Built for the Next Phase of High-Density Campus and Data Center Networks](https://nexatg.com/fortiswitch-ax9000g-built-for-the-next-phase-of-high-density-campus-and-data-center-networks/): Discover how Fortinet FortiSwitch AX9000G delivers high-density switching, scalable connectivity, and Wi-Fi 7 support for campus and data center networks.
- [Technology that blocks DGA domains](https://nexatg.com/technology-that-blocks-dga-domains/): Kaspersky email security solutions now include a technology that detects domains with auto-generated names.
- [Why Caribbean Threats Cascade Into Global Cyber-Risk](https://nexatg.com/why-caribbean-threats-cascade-into-global-cyber-risk/): The region is demonstrating what happens when exploits accelerate but assurance does not.
- [Cyber Insurance's New Reality: Underwriting Isn't Enough](https://nexatg.com/cyber-insurances-new-reality-underwriting-isnt-enough/): Rising AI, social engineering, and cloud risks are pushing carriers beyond risk transfer and deeper into cybersecurity itself.
- [Understanding PHP2Shell Vulnerabilities and Reducing Risk While You Patch](https://nexatg.com/understanding-php2shell-vulnerabilities-and-reducing-risk-while-you-patch/): Learn how the PHP2Shell vulnerability affects web applications and how FortiGuard Labs IPS protections reduce exposure while organizations deploy critical PHP updates.
- [AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack](https://nexatg.com/ai-agents-as-insider-threats-inside-microsofts-bet-on-a-unified-security-stack/): Microsoft's Project Perception adds Guardian Agents to monitor and contain anomalous AI agents, but experts warn that policing unpredictable agents with other agents may compound — not contain…
- [State Bank of India Suffers a Customer PII Data Leak](https://nexatg.com/state-bank-of-india-suffers-a-customer-pii-data-leak/): Relatively small data breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII.
- [Is “SIEM-less” really what it sounds like?](https://nexatg.com/is-siem-less-really-what-it-sounds-like/): SIEM-less security may sound like an escape from traditional SIEM complexity and costs, but the underlying capabilities still have to exist somewhere.
- [Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack](https://nexatg.com/microsoft-links-storm-0940-to-connectwise-supply-chain-attack/): The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants.
- [How new PHP vulnerabilities threaten home users](https://nexatg.com/how-new-php-vulnerabilities-threaten-home-users/): Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) pose a risk to home users and their data. We explain the danger and how to stay protected.
- [What We Missed: Feds Lasso Texas Laptop Farms](https://nexatg.com/what-we-missed-feds-lasso-texas-laptop-farms/): In this video, Dark Reading editors discuss some of the news they didn't get a chance to cover, from busting up North Korea's stateside infrastructure in "Operation Lonestar…
- [AWS Continuum for code vulnerabilities is now generally available](https://nexatg.com/aws-continuum-for-code-vulnerabilities-is-now-generally-available/): AWS Continuum for code vulnerabilities is a new security service that uses AI to automatically find, validate, and prioritize code vulnerabilities in your environment, then delivers ready-to-review fixes…
- [Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour](https://nexatg.com/les-supermarches-de-lue-paient-dun-firmware-de-refrigerateur-non-mis-a-jour/): Des centaines de magasins ont subi des pertes se chiffrant en millions d'euros parce qu'ils avaient fait appel à des tiers pour gérer le micrologiciel OT obsolète qui…
- [EMudhra Intermediate CA Certificates Compromised](https://nexatg.com/emudhra-intermediate-ca-certificates-compromised/): Eight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our analysis and containment guide. The post EMudhra Intermediate CA Certificates Compromised appeared…
- [What Is ROT Data? A 6 Step Guide to Automating Data Minimization](https://nexatg.com/what-is-rot-data-a-6-step-guide-to-automating-data-minimization/): Every enterprise knows roughly what its storage costs, but far fewer know how much of that storage is holding data nobody will open again. The post What Is…
- [Northflank security breach leads to abuse of customers' AI API keys](https://nexatg.com/northflank-security-breach-leads-to-abuse-of-customers-ai-api-keys/): Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers'…
- [New Android SMS of Death exploit can remotely crash unpatched phones](https://nexatg.com/new-android-sms-of-death-exploit-can-remotely-crash-unpatched-phones/): A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular…
- [Reddit to lock content behind logins to fight scrapers](https://nexatg.com/reddit-to-lock-content-behind-logins-to-fight-scrapers/): Reddit announced in a post by co-founder Steve Huffman that the site will gradually become a "logged-in service," offering limited access to visitors without accounts. [...]
- [From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era.](https://nexatg.com/from-beginner-to-bug-hunter-learning-cybersecurity-in-the-ai-era/): AI-generated vulnerability reports are overwhelming some bug bounty programs, making it harder for aspiring security researchers to know where to start. TryHackMe explains how beginners can build practical…
- [Chainalysis discloses data breach from "offensive agentic techniques"](https://nexatg.com/chainalysis-discloses-data-breach-from-offensive-agentic-techniques/): Blockchain analytics firm Chainalysis disclosed a data breach after attackers used "offensive agentic techniques" to access internal systems and tools, exposing customer names, email addresses, user IDs, and…
- [Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data](https://nexatg.com/chainalysis-confirms-intrusion-into-internal-tools-and-exposure-of-customer-identity-data/): American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that…
- [Syrian Hacker Gets Prison Time in US After Over a Decade on the Run](https://nexatg.com/syrian-hacker-gets-prison-time-in-us-after-over-a-decade-on-the-run/): A US court sentenced Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad attacks on media, businesses, and government entities. The post Syrian Hacker Gets Prison Time…
- [Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access](https://nexatg.com/attackers-chain-three-ivanti-connect-secure-flaws-to-gain-unauthenticated-root-access/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active…
- [A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats](https://nexatg.com/a-shared-chatgpt-link-could-run-attacker-code-in-your-session-and-read-private-chats/): A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the…
- [Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%](https://nexatg.com/cloudflare-reports-18-2-million-network-layer-ddos-attacks-in-q3-up-38/): Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million…
- [Inside a malicious Claude Code-branded extension and its persistent SSH backdoor](https://nexatg.com/inside-a-malicious-claude-code-branded-extension-and-its-persistent-ssh-backdoor/): Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post Inside a malicious Claude Code-branded extension and its…
- [Critical Linux kernel flaw allows remote root attacks on MPTCP servers](https://nexatg.com/critical-linux-kernel-flaw-allows-remote-root-attacks-on-mptcp-servers/): Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath…
- [Devs Hit by Trojanized Claude Code Extension for Cursor](https://nexatg.com/devs-hit-by-trojanized-claude-code-extension-for-cursor/): Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs).
- [Behind the Scenes of How Operation Blackout Went Down](https://nexatg.com/behind-the-scenes-of-how-operation-blackout-went-down/): A recent law enforcement operation to dismantle harmful scam centers was a big success. A threat intelligence expert walks us through what happened and why he wants more…
- [Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide](https://nexatg.com/chinese-hackers-use-ai-powered-artex-to-target-over-200-organizations-worldwide/): Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activity has…
- [From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths](https://nexatg.com/from-help-desk-impersonation-to-ad-cs-abuse-investigating-esc1-and-esc8-intrusion-paths/): Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through authentication relay and Kerberos. The post From help desk impersonation to AD CS…
- [How to download and read ebooks safely](https://nexatg.com/how-to-download-and-read-ebooks-safely/): We explain how to download and read ebooks safely, whether a device can be infected through an ebook, and why pirate libraries and free-book sites are dangerous.
- [Trezor warns of suspected crypto-theft implant in hardware wallet](https://nexatg.com/trezor-warns-of-suspected-crypto-theft-implant-in-hardware-wallet/): Hardware wallet device maker Trezor has received credible reports about a suspected hardware crypto-theft implant in a Trezor Safe 5 sold by its reseller CryptoBilis in Southeast Asia.…
- [L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiara](https://nexatg.com/litalia-e-afflitta-da-vulnerabilita-informatiche-senza-una-causa-chiara/): I ricercatori non riescono a spiegare del tutto perché le minacce informatiche in Italia siano così diverse rispetto a quelle di qualsiasi altro Paese.
- [TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them](https://nexatg.com/teamviewer-flaw-lets-remote-computers-attack-users-who-connect-to-control-them/): TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the…
- [PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress](https://nexatg.com/php2shell-attacks-root-palo-alto-firewalls-but-fail-against-wordpress/): Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week. The post PHP2Shell Attacks Root Palo Alto…
- [Building Cybersecurity Careers through Certification and Continuous Learning](https://nexatg.com/building-cybersecurity-careers-through-certification-and-continuous-learning/): Explore how Fortinet training and certification help people enter cybersecurity, build practical skills, and advance throughout their careers.
- [What AI Cybercrime Exercises Reveal About Collective Defense](https://nexatg.com/what-ai-cybercrime-exercises-reveal-about-collective-defense/): Fortinet's Derek Manky shares lessons from three CLTC tabletop exercises on AI-enabled cybercrime and what they reveal about decision-making in collective defense and previews the next step in…
- [In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak](https://nexatg.com/in-other-news-anthropic-breach-dispute-uefi-flaw-hits-most-servers-cloudflare-ai-data-leak/): Noteworthy stories that might have slipped under the radar: Iran eyed in military freezer hacks, Copenhagen University breach, AI-powered malware. The post In Other News: Anthropic Breach Dispute,…
- [Malicious Claude Code extension on Cursor planted SSH backdoors](https://nexatg.com/malicious-claude-code-extension-on-cursor-planted-ssh-backdoors/): A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers…
- [Undead Software Projects Continue to Raise Security Risks](https://nexatg.com/undead-software-projects-continue-to-raise-security-risks/): A security firm patched a decade-old app to prevent the takeover of millions of machines, highlighting that abandoned domains remain a boon to attackers.
- [WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours](https://nexatg.com/wordpress-rce-flaw-draws-nearly-63000-attack-attempts-in-just-24-hours/): Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, which does not have a CVE…
- [Replication for Disaster Recovery: How to Hit Tight RTOs and RPOs](https://nexatg.com/replication-for-disaster-recovery-how-to-hit-tight-rtos-and-rpos/): Here is a question worth sitting with: when did you last prove your recovery time objective, rather than assert it? The post Replication for Disaster Recovery: How to…
- [SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone](https://nexatg.com/ss7-and-diameter-attacks-how-signaling-flaws-expose-your-phone/): Flaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate subscribers without compromising their devices. Cape…
- [Passkeys Are Better Than Passwords. But They Are Not Enough.](https://nexatg.com/passkeys-are-better-than-passwords-but-they-are-not-enough/): As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it. The post Passkeys Are Better Than Passwords. But…
- [Five data tricks you don’t want this Halloween](https://nexatg.com/five-data-tricks-you-dont-want-this-halloween/): The deal is simple: Give us a treat, or there might be a trick. Of course, these days, we’re mostly there for the treat: A chocolate bar, a…
- [Bulletproof Host Virtualine Loses Its Domain to FBI Seizure](https://nexatg.com/bulletproof-host-virtualine-loses-its-domain-to-fbi-seizure/): It allowed customers to host hack-for-hire services, supported ransomware and infostealer operators, and accepted crypto payments. The post Bulletproof Host Virtualine Loses Its Domain to FBI Seizure appeared…
- [CISA says max severity GitLab flaw now exploited in the wild](https://nexatg.com/cisa-says-max-severity-gitlab-flaw-now-exploited-in-the-wild/): Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA). [...]
- [Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis](https://nexatg.com/trezor-warns-of-suspected-hardware-implant-in-one-of-its-wallets-sold-by-cryptobilis/): A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer…
- [Fresh WordPress Vulnerability in Attackers’ Crosshairs](https://nexatg.com/fresh-wordpress-vulnerability-in-attackers-crosshairs/): Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution. The post Fresh WordPress Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek.
- [RESILIENCE AS A BOARDROOM STRATEGY](https://nexatg.com/resilience-as-a-boardroom-strategy/): In an AI-driven enterprise, resilience is no longer an insurance policy. It is the operating model for trust, continuity, and scale. The post RESILIENCE AS A BOARDROOM STRATEGY…
- [Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving](https://nexatg.com/why-urgent-security-fixes-arent-fixed-observe-prove-act-confirm-gets-them-moving/): The alert is critical. The fix is known. And the ticket sits in a queue for days. Security teams understand the risk, but the people who keep applications…
- [Microsoft finally fixes VPN issues caused by September updates](https://nexatg.com/microsoft-finally-fixes-vpn-issues-caused-by-september-updates/): Microsoft has resolved Always On VPN connection failures triggered after installing the September 2026 Windows 11 security updates. [...]
- [Drupal Commerce Core Vulnerability Exploited Against Online Stores ](https://nexatg.com/drupal-commerce-core-vulnerability-exploited-against-online-stores/): Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders. The post Drupal Commerce Core Vulnerability…
- [Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison](https://nexatg.com/syrian-hacker-behind-fake-tweet-that-triggered-136-billion-market-drop-gets-42-months-in-prison/): Ahmad Umar Agha, a Syrian Electronic Army hacker known online as "Th3Pr0," has been sentenced by a U.S. federal court to 42 months in prison for his role in a…
- [Drupal warns of critical Commerce Core flaw exploited in attacks](https://nexatg.com/drupal-warns-of-critical-commerce-core-flaw-exploited-in-attacks/): Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild. [...]
- [$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack](https://nexatg.com/2-million-drained-from-polymarket-traders-in-new-supply-chain-attack/): Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds. The post $2 Million+ Drained From Polymarket Traders in…
- [Max-Severity GitLab Vulnerability Exploited Against Alpine Linux](https://nexatg.com/max-severity-gitlab-vulnerability-exploited-against-alpine-linux/): Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server. The post Max-Severity GitLab Vulnerability Exploited Against Alpine Linux appeared first on SecurityWeek.
- [Binance links $6.3 billion crypto theft to compromised DevOps laptop](https://nexatg.com/binance-links-6-3-billion-crypto-theft-to-compromised-devops-laptop/): Binance, the world's largest crypto exchange, has linked the theft of about $6.3 billion in cryptocurrency to a DevOps engineer's compromised laptop. [...]
- [Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor](https://nexatg.com/official-claude-code-extension-on-cursor-marketplace-trojanized-with-persistent-ssh-backdoor/): Cybersecurity researchers have disclosed that a trojanized version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update, attempting to install a…
- [TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines](https://nexatg.com/teamviewer-flaw-could-let-malicious-hosts-take-over-support-technicians-machines/): An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system. The post TeamViewer Flaw Could Let Malicious Hosts Take Over Support…
- [As Russia's Cyberwar Evolves, Belarus Steps Forward](https://nexatg.com/as-russias-cyberwar-evolves-belarus-steps-forward/): The "FrostyNeighbor" advanced persistent threat (APT) launched a destructive attack in Ukraine and is raising concerns about deeper alignment with Russian cyber objectives.
- [Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw](https://nexatg.com/hackers-actively-exploit-highly-critical-drupal-commerce-core-authorization-bypass-flaw/): Drupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a…
- [CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV](https://nexatg.com/cisa-adds-actively-exploited-gitlab-rce-and-cisco-firewall-dos-flaws-to-kev/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of…
- [Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen](https://nexatg.com/binance-suffers-security-breach-affecting-6-3-billion-in-assets-nearly-3-billion-frozen/): Cryptocurrency giant Binance said on Thursday that a "security incident" on its platform has impacted about $6.3 billion worth of assets. The world's biggest cryptocurrency exchange said nearly…
- [OpenAI doubles ChatGPT Pro usage limits after backlash over planned 50% cut](https://nexatg.com/openai-doubles-chatgpt-pro-usage-limits-after-backlash-over-planned-50-cut/): OpenAI says it won't reduce usage limits for the $100, $200, and $500 ChatGPT Pro plans, as well as Business Premium, and it also promised to keep Dots…
- [Binance probes potential $5.8 billion crypto-theft hack](https://nexatg.com/binance-probes-potential-5-8-billion-crypto-theft-hack/): Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets, in what could become the largest cryptocurrency hack in history. [...]
- [Anthropic-Themed Phishing Emails Bypass Top Security Tools](https://nexatg.com/anthropic-themed-phishing-emails-bypass-top-security-tools/): Obvious phishing emails with numerous red flags are somehow getting past some of the industry-leading secure email gateway (SEG) products.
- [Rethinking Cybersecurity Awareness in the AI Era](https://nexatg.com/rethinking-cybersecurity-awareness-in-the-ai-era/): This installment of the Reporters' Notebook video series discusses some of the trends and topics from Cybersecurity Awareness Month, from using AI for better training to educating next-generation…
- [Why CTF Competitions May Be More Important Than Ever](https://nexatg.com/why-ctf-competitions-may-be-more-important-than-ever/): As artificial intelligence squeezes early-career learning opportunities, capture-the-flag contests could be one way to help pick up the slack.
- [ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories](https://nexatg.com/threatsday-critical-firewall-flaws-banking-trojans-rented-weaponized-pdf-token-theft-26-more-stories/): Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software…
- [Claude Model Builds Exploits Across Major Browsers & OSes](https://nexatg.com/claude-model-builds-exploits-across-major-browsers-oses/): An unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says.
- [Chrome extensions with 13.4 million installs caught hijacking searches](https://nexatg.com/chrome-extensions-with-13-4-million-installs-caught-hijacking-searches/): A massive search-hijacking campaign involving 319 Chrome extensions with a combined 13.4 million reported installations redirected users' searches through tracking servers to generate advertising revenue from Bing and…
- [Tracking AI adoption in North Korean threat actor tradecraft](https://nexatg.com/tracking-ai-adoption-in-north-korean-threat-actor-tradecraft/): As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and efficiency of attacks, we’ve identified North Korean threat actors expanding their…
- [IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment](https://nexatg.com/idc-marketscape-names-microsoft-a-leader-in-the-2026-worldwide-modern-endpoint-security-for-enterprises-vendor-assessment/): IDC has named Microsoft a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises. The post IDC MarketScape names Microsoft a Leader in the…
- [Threat Modeling With 4 Simple Questions on a White Board](https://nexatg.com/threat-modeling-with-4-simple-questions-on-a-white-board/): A four-question exercise that CISOs can use to create a threat model that promises results, without a big spend.
- [5 levels of resilience maturity in education](https://nexatg.com/5-levels-of-resilience-maturity-in-education/): Every education institution that has experienced a ransomware attack can point to the moment its systems came back online. Far fewer can demonstrate, with evidence, that the recovered…
- [Data sovereignty doesn’t stop at production](https://nexatg.com/data-sovereignty-doesnt-stop-at-production/): Ask most IT teams where their data lives and you'll get a confident answer about production. Ask where every backup, backup copy, and replica lives, and the answer…
- [Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners](https://nexatg.com/fake-chatgpt-and-claude-apps-abuse-signed-executables-to-deploy-crypto-miners/): Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a…
- [Google Touts Powerful Cybersecurity Capabilities in Gemini 4 Carbon Model](https://nexatg.com/google-touts-powerful-cybersecurity-capabilities-in-gemini-4-carbon-model/): Google’s new frontier model scored 88.2% on SEC-bench Pro and is rolling out first to vetted cyber defenders via its Fairwind Program. The post Google Touts Powerful Cybersecurity…
- [How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI](https://nexatg.com/how-secure-are-us-elections-voting-machine-risks-and-the-growing-threat-of-ai/): Unpatched voting machines, unverifiable QR-coded ballots, and AI-driven influence campaigns leave US elections short of secure. The post How Secure Are US Elections? Voting Machine Risks and the Growing…
- [Extending SASE Sovereignty Beyond Data to Management](https://nexatg.com/extending-sase-sovereignty-beyond-data-to-management/): Learn how FortiSASE Sovereign extends control over security data, infrastructure, and management while preserving an integrated SASE operating model
- [Microsoft fixes Remote Desktop failures caused by recent Windows updates](https://nexatg.com/microsoft-fixes-remote-desktop-failures-caused-by-recent-windows-updates/): Microsoft has resolved a known issue that prevents non-admin users from connecting to devices via Remote Desktop when the "Administrator protection" security feature is enabled. [...]
- [Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps](https://nexatg.com/cisco-open-sources-quarry-to-catch-ai-agent-attacks-hidden-in-harmless-steps/): Cisco open sourced Project Quarry, a rule language for detecting AI agent attacks that only emerge across sequences of benign actions. The post Cisco Open Sources Quarry to…
- [3 Ways AI Agents Already Operate in Your Browser](https://nexatg.com/3-ways-ai-agents-already-operate-in-your-browser/): AI agents can control authenticated browsers, interact with corporate applications, and access sensitive data while appearing to act as legitimate employees. Keep Aware examines three ways agents operate…
- [Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities](https://nexatg.com/googles-gemini-4-carbon-leads-benchmarks-for-finding-exploiting-and-patching-vulnerabilities/): Google on Wednesday took the wraps off Gemini 4 Carbon, its latest frontier model with state-of-the-art cybersecurity and long-horizon capabilities. "It shows significant gains across coding and agentic…
- [Applying Security by Design and Cyber Immunity principles to protect AI systems](https://nexatg.com/applying-security-by-design-and-cyber-immunity-principles-to-protect-ai-systems/): How organizations can use the basic principles of secure system design to reduce the risks of deploying AI agents: a guide for AI system architects and security teams.
- [Recover From the Attacks You Don’t Detect](https://nexatg.com/recover-from-the-attacks-you-dont-detect/): Imagine you’ve bought the best home security system money can buy. Cameras on every entrance. Motion sensors in every room. Alarms on every door and window. You open…
- [Webinar: How to Build AI Threat Readiness Into Your Security Operations](https://nexatg.com/webinar-how-to-build-ai-threat-readiness-into-your-security-operations/): Security teams have spent years trying to detect threats faster. AI is changing the harder part: how much time defenders have left to act. Advanced AI models can…
- [Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes](https://nexatg.com/shadowy-ai-relay-disables-openai-codex-claude-code-sandboxes/): The enigmatic service is providing popular AI coding tools to mainland China and other regions where OpenAI and Anthropic products are not officially for sale — but with…
- [Cyber Vulnerabilities Besiege Italy, Absent Clear Cause](https://nexatg.com/cyber-vulnerabilities-besiege-italy-absent-clear-cause/): Researchers can't quite explain why cyber threats look so different in Italy compared to everywhere else.
- [Bitdefender Named a Representative Vendor in the 2026 Gartner® Market Guide for Managed Detection and Response](https://nexatg.com/bitdefender-named-a-representative-vendor-in-the-2026-gartner-market-guide-for-managed-detection-and-response/): For the fifth consecutive year, Bitdefender is included as a Representative Vendor in the 2026 Gartner® Market Guide for Managed Detection and Response.
- [China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility](https://nexatg.com/china-linked-hackers-exploited-vmware-esx-zero-day-to-reduce-audit-trail-visibility/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed…
- [Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces](https://nexatg.com/attackers-exploit-php2shell-flaws-in-internet-exposed-palo-alto-networks-management-interfaces/): Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. "Active exploitation has been observed targeting the Palo…
- [Police seize Virtualine bulletproof service tied to ransowmare, cybercrime](https://nexatg.com/police-seize-virtualine-bulletproof-service-tied-to-ransowmare-cybercrime/): U.S. law enforcement has seized the primary domain of Virtualine, a bulletproof hosting service advertised on cybercrime forums for facilitating illegal activities. [...]
- [Fortinet Reports Strong Third Quarter 2026 Financial Results](https://nexatg.com/fortinet-reports-strong-third-quarter-2026-financial-results/): Raises 2026 revenue guidance to 20% year over year growth
- [GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub](https://nexatg.com/ghostaction-hacking-wave-fizzles-but-attackers-lurk-on-in-github/): The supply chain attack campaign's shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit.
- [Discord to let search engines index public server messages](https://nexatg.com/discord-to-let-search-engines-index-public-server-messages/): Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation.…
- [Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns](https://nexatg.com/volt-typhoon-used-covert-silent-train-network-in-four-zero-day-exploitation-campaigns/): The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for…
- [Unwrapping Retail Peak Season Cyber Threats](https://nexatg.com/unwrapping-retail-peak-season-cyber-threats/): Unit 42 explores key peak shopping season retail cyber threats, from ransomware to AI attacks, and shares how to defend operations and customer trust. The post Unwrapping Retail…
- [The Silent Ransom Group Leak Shows Why Paying for Silence Fails](https://nexatg.com/the-silent-ransom-group-leak-shows-why-paying-for-silence-fails/): The third quarter of 2026 reinforced a decisive shift in the threat environment: ransomware is increasingly shedding the “ware” in favor of pure, low-friction data extortion. Nowhere was…
- [Sony ISP subsidiary data breach exposes 2.5 million customer records](https://nexatg.com/sony-isp-subsidiary-data-breach-exposes-2-5-million-customer-records/): Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers' personal information. [...]
- [Weak keys in eMudhra CA certificates: the risks and how to respond](https://nexatg.com/weak-keys-in-emudhra-ca-certificates-the-risks-and-how-to-respond/): We explain how the weak keys came about, and which applications and IT systems in an organization should be checked for the vulnerability so the threat can be…
- [PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network](https://nexatg.com/php2shell-attack-roots-25-servers-breaches-u-s-government-affiliated-network/): Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities…
- [The CISO’s evolving role: Protecting and defending in the agentic era](https://nexatg.com/the-cisos-evolving-role-protecting-and-defending-in-the-agentic-era/): As AI and agents reshape the enterprise, CISOs face two critical priorities: enabling innovation with the right identity and data guardrails, and modernizing defense to keep pace with…
- [Volt Typhoon hides zero-day attacks using 'Silent Train' framework](https://nexatg.com/volt-typhoon-hides-zero-day-attacks-using-silent-train-framework/): Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value…
- [AI Takes Root in Hospital Corridors, Raises Security Stakes](https://nexatg.com/ai-takes-root-in-hospital-corridors-raises-security-stakes/): Artificial intelligence is everywhere in healthcare, from doctors' intake forms to cancer screenings. But in some cases, life-and-death uses are outpacing cybersecurity.
- [Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison](https://nexatg.com/ukrainian-hive-and-nefilim-ransomware-affiliate-gets-70-months-in-us-prison/): Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks. The post Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70…
- [Microsoft urges Entra ID admins to migrate users to passkeys](https://nexatg.com/microsoft-urges-entra-id-admins-to-migrate-users-to-passkeys/): Microsoft again asked Entra ID administrators to migrate users to phishing-resistant methods to avoid sign-in disruptions before it retires SMS and voice authentication in February 2027. [...]
- [Attacker Relentlessly Scans for Credentials by Impersonating AI Bots](https://nexatg.com/attacker-relentlessly-scans-for-credentials-by-impersonating-ai-bots/): The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.
- [Data backup and recovery: backup vs. replication and when to use both](https://nexatg.com/data-backup-and-recovery-backup-vs-replication-and-when-to-use-both/): Your jobs completed last night. Retention is enforced, repositories are provisioned, and the dashboard has been green all week. None of that answers the two questions you'll get…
- [InfraTrust report warns of exploited flaws in critical network infrastructure](https://nexatg.com/infratrust-report-warns-of-exploited-flaws-in-critical-network-infrastructure/): Attackers are actively exploiting vulnerabilities across critical network infrastructure, and PHP flaws known as "PHP2Shell" put the web management interfaces of firewalls, VPNs, application delivery controllers, and other…
- [Upwind Security Raises $400 Million at $3.8 Billion Valuation](https://nexatg.com/upwind-security-raises-400-million-at-3-8-billion-valuation/): The massive funding round comes just days after reports emerged that Upwind had attracted acquisition interest from several companies, including Datadog The post Upwind Security Raises $400 Million at $3.8 Billion…
- [Chrome and Firefox Updates Patch Over 200 Vulnerabilities](https://nexatg.com/chrome-and-firefox-updates-patch-over-200-vulnerabilities/): The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches. The post Chrome and Firefox Updates Patch Over 200 Vulnerabilities appeared…
- [TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices](https://nexatg.com/tls-flaws-found-in-goahead-web-server-used-in-hundreds-of-millions-of-devices/): FoxIO disclosed three GoAhead TLS bugs that can let revoked certificates through or expose some encrypted sessions to eavesdroppers. The post TLS Flaws Found in GoAhead Web Server…

## Pages

- [Oil & Gas](https://nexatg.com/oil-gas/)
- [Banking & Financial Services](https://nexatg.com/banking/)
- [Developer Outsourcing](https://nexatg.com/developer-outsourcing/)
- [Contact](https://nexatg.com/contact/)
- [Customer Onboarding](https://nexatg.com/onboarding/)
- [Newsroom](https://nexatg.com/news/)
- [Partners & Customers](https://nexatg.com/partners/)
- [Telecom](https://nexatg.com/telecom/)
- [About](https://nexatg.com/about/)
- [Home](https://nexatg.com/)


[comment]: # (Generated by Hostinger Tools Plugin)