Independent analysis of vulnerabilities and intrusion campaigns that are actually being exploited — written for the people who have to patch and detect them.
Every post answers the same five questions: what broke, who is affected, is it being exploited in the wild, what to patch, and how to detect it. No proof-of-concept code, no exploitation walkthroughs.
From 11 September, a 24-hour reporting clock applies to actively exploited vulnerabilities — including in products you shipped years ago.
Modified ScreenConnect clients that infect every host they connect to. The durable detection is in the audit log.
Progress fixed this in July. Public exploit code landed in September. EPSS still reads 0.5%.
Adobe shipped a hotfix for the Magento flaw exploited since 4 September. Applying it is the easy half.