Posts tagged: Penetration Testing
-
Active incident at Dreamhost forcing password reset
A Dreamhost incident forced password resets over a possible authentication compromise. Learn what to verify, how to respond and what compliance requires.
-
Hackers Sign In to 173 Microsoft 365 Tenants via ConnectWise
Attackers used a stolen ConnectWise credential to sign in to 173 Microsoft 365 tenants. See which access controls catch third party account compromise.
-
Oracle Health Data Breach Tally Climbs to Nearly 20 Million
The Oracle health data breach tally climbs to nearly 20 million. Learn how this cloud incident impacts NIST and HIPAA compliance for your organization.
-
Self-hosted HTTP tunnels with SSH and Nginx
Self-hosted HTTP tunnels move traffic through SSH and an Nginx tunnel on the far side; here are the mechanics, hardening and compliance duties.
-
Livenerf: Has Opus 5.5 been nerfed yet?
Livenerf showed how a flaw in the Opus 5.5 audio codec can run arbitrary code, and what regulated firms should fix in patch and supply chain controls.
-
Bitget Resumes Bitcoin Withdrawals After Major Crypto Heist
The Bitget heist froze Bitcoin withdrawals after attackers took hundreds of millions in crypto; the post maps the fallout for third party risk.
-
Decades-Old File Flaws Span Android, Linux, macOS and Windows
File security flaws decades old span Android, Linux, macOS and Windows, leaking file events to side channels. See how cross-platform patching closes them.
-
Dropbox's Jan 1st 2027 terms of service
The Dropbox terms of service taking effect in 2027 change data ownership, retention and liability; here is what regulated teams must adjust.
-
Orkes Conductor Platform Hit by Critical Pre-Auth RCE Flaw
A critical unauthenticated RCE flaw in the Orkes Conductor platform, CVE-2026-58138, is exploited in the wild; see the mechanics and the response plan.
-
Attackers Forge Admin Tokens in Active WSO2 API Manager Exploits
WSO2 API Manager is under active exploitation through a JWT flaw that forges admin tokens; learn the mechanics and layered response for gateways.
-
Veradigm Breach Shows Why Vendor Data Notification Plans Matter
Veradigm disclosed a third party breach with attackers threatening to publish data. What healthcare leaders should check across their supply chain.
-
SickKids data breach exposes employee and job applicant info
A third party software flaw exposed SickKids employee and job applicant data while clinical systems stayed isolated. Lessons for supply chain risk.
