A man-in-the-middle attack (MITM attack), sometimes known as a person-in-the-middle attack, is a cyber attack where an attacker relays and possibly alters communication between two parties who believe they are communicating directly. This allows the attacker to intercept communication, listen in, and… Read More "What Is a Man-in-the-Middle Attack? Prevention Tips and Guide"
US law enforcement agents obtained authorization to use a controversial surveillance device capable of intercepting cell phone signals to find and arrest a 21-year-old college student who helped produce journalist Don Lemon’s coverage of an anti-ICE protest, court filings show.… Read More "Feds Got Warrants to Use Fake Cell Towers to Hunt Down Don Lemon’s Producer"
A Canada-based cybersecurity expert was arrested last week in the United States on suspicion of being involved in ShinyHunters attacks, including the recent hacking of FBI systems. FBI director Kash Patel announced on Friday that agents had arrested another suspected… Read More "Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe"
The FBI has arrested a Canadian cybersecurity executive on suspicion of involvement with the ShinyHunters group, which was responsible for a major breach at the bureau last month. FBI director, Kash Patel, confirmed the arrest on X October 9, without… Read More "Net Closes Around ShinyHunters with Another FBI Arrest"
Web communications can be routed over the Hypertext Transfer Protocol (HTTP) and the Hypertext Transfer Protocol Secure (HTTPS). The latter ensures encrypted data transfer between a website and a user. Some sites will offer both HTTP and HTTPS connections, but… Read More "Protect Against HTTP Attacks with HTTPS Strict Transport Policy"
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary… Read More "Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE"
Ransomware groups continue to target a high-severity vulnerability in Palo Alto Networks products, despite a security patch being released five months ago, according to ReliaQuest. The cyber threat detection provider warned in a social media advisories posted on October 9… Read More "Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups"
Arguably–in that people literally argue about it–there are two types of web servers: traditional servers like Apache and IIS, often backhandedly described as “full-featured,” and “lightweight” servers like Lighttp and nginx, stripped down for optimum memory footprint and performance. Lightweight… Read More "How to Build a Tough NGINX Server in 15 Steps"
Threat actors started exploiting a recently patched critical vulnerability in SonicWall SMA1000 appliances within days after public disclosure. Tracked as CVE-2026-102255 (CVSS score of 10), the security defect is described as a pre-authenticated server-side request forgery (SSRF) issue affecting the… Read More "Critical SonicWall Vulnerability Exploited Days After Disclosure"
“Month to month, companies come out with new direction, new tools, new functions, and new features that have to be considered by security. There are so many innovations, and you just have to keep up. It takes a personal commitment… Read More "The 7 biggest issues CISOs and security teams face today"
