The deployment of PEERSTITCH malware relied on a path traversal vulnerability in the FortiOS system-auto-script feature to achieve root-level access on target firewalls. This sophisticated operation, identified under the tracking designation CL-STA-0954, marks a significant evolution in the methodology used by modern threat actors to target
Criminal groups are currently utilizing a high-severity command execution bug to bypass authentication on Ivanti Connect Secure VPN installations. This development has prompted the Cybersecurity and Infrastructure Security Agency to issue an immediate directive for federal agencies to remediate CVE-2026-104935. The vulnerability carries a severity

Cybersecurity defenses have traditionally relied heavily on recognizable indicators: known malware signatures, suspicious files, malicious domains, and other artifacts that can be identified and blocked. Increasingly, however, threat actors are combining legitimate system utilities, obfuscated scripts, social engineering, and generative AI to make attacks more difficult to identify through any

The Protocol That Can Make Email Interception Obsolete The email your CFO sent this morning traveled through at least half a dozen servers before reaching its destination. At any one of those handoffs, without proper encryption enforcement, an attacker could have read, copied, or altered its contents. MTA-STS exists to close that gap permanently. For years, email security has mainly focused on

The rise of broken patches demonstrates that many modern fixes act merely as bug closers rather than comprehensive solutions for underlying architectural flaws. This phenomenon has fundamentally altered the security landscape as researchers at Terra Security observe an unprecedented eightfold increase in the frequency of failed remediations during 2026. What was once considered a definitive end to a vulnerability cycle is now frequently just the beginning of a high-stakes game of cat and mouse between developers and sophisticated threat actors. Data
