API Attack Awareness: Business Logic Abuse — Exploiting the Rules of the Game
As Cybersecurity Awareness Month continues, we wanted to dive even deeper into the attack methods affecting APIs. We’ve already reviewed…
October 2025
API Attack Awareness: Business Logic Abuse — Exploiting the Rules of the Game
As Cybersecurity Awareness Month continues, we wanted to dive even deeper into the attack methods affecting APIs. We’ve already reviewed…
CVE-2025-55752 and CVE-2025-55754: Apache Tomcat Vulnerabilities Expose Servers to RCE Attacks
In March 2025, CVE-2025-24813 served as a stark reminder of how quickly a critical Apache Tomcat vulnerability can turn into…
Everest Ransomware Group Claims Theft of 1.5 Million Passenger Records from Dublin Airport
The ransomware group Everest claimed responsibility on Oct 26 for a cyberattack that allegedly compromised over 1.5 million passenger records…
QNAP NetBak Exposed: Critical ASP.NET Core Bug Enables Security Bypass
A critical security vulnerability has been identified in QNAP’s NetBak PC Agent software, stemming from a flaw in Microsoft ASP.NET…
Patch Now! Apache Tomcat Vulnerabilities Expose Servers to RCE Risk
The Apache Software Foundation recently addressed two security vulnerabilities affecting multiple versions of Apache Tomcat, a widely-used open-source Java servlet…
Critical XWiki Vulnerability Abused in the Wild for Cryptocurrency Mining
A critical remote code execution (RCE) vulnerability (CVE-2025-24893) in XWiki, a widely-used open-source wiki platform, is being actively exploited in…
Aisuru Botnet Shifts from DDoS to Residential Proxies
Aisuru, the botnet responsible for a series of record-smashing distributed denial-of-service (DDoS) attacks this year, recently was overhauled to support…
YouTube’s New AI Tool Fights Deepfakes—But Creators Still Need Real Protection
YouTube has launched an AI likeness-detection system designed to alert creators when their face appears in videos uploaded by others.…
CVE-2025-62725: From “docker compose ps” to System Compromise
Docker Compose powers millions of workflows, from CI/CD runners and local development stacks to cloud workspaces and enterprise build pipelines.…