From LinkedIn to X, GitHub to Instagram, there are plenty of opportunities to share work-related information. But posting could also get your company into trouble. 01 Dec 2025 • , 5 min. read Employee advocacy has been around as a… Read More "What’s at stake if your employees post too much online"
Citrix has released a new critical security bulletin addressing two new vulnerabilities in its NetScaler Application Delivery Controller (ADC) and NetScaler Gateway. The two products, formerly known as Citrix ADC and Citrix Gateway, are networking and security solutions used by… Read More "Citrix Urges Immediate Patching for Critical NetScaler Vulnerabilities"
A view of the H2 2025 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts 16 Dec 2025 • , 2 min. read The second half of the year underscored just… Read More "ESET Threat Report H2 2025"
A critical arbitrary file upload vulnerability in Ninja Forms – File Upload Plugin has been identified, exposing thousands of WordPress sites to potential compromise. The issue affects plugin versions up to 3.3.26 and allows unauthenticated attackers to upload malicious files,… Read More "Critical Vulnerability in Ninja Forms Exposes WordPress Sites"
Jede neue Entdeckung – etwa mit Blick auf das Einfallstor für den Angriff, seinen Scope oder die von den Angreifern verwendeten Tools, könnten die Untersuchungsziele des Teams verändern, so Leverett: “Was als Containment-Vorhaben beginnt, kann schnell zum umfänglichen Recovery-Projekt ausarten.… Read More "So geht Post-Incident Review | CSO Online"
ESET researchers examined CVE‑2025‑50165, a serious Windows vulnerability described to grant remote code execution by merely opening a specially crafted JPG file – one of the most widely used image formats. The flaw, found and documented by Zscaler ThreatLabz, piqued… Read More "A critical flaw in Windows Imaging Component"
A flaw in Google’s API key system has reportedly exposed mobile applications to unintended access to its Gemini AI platform. According to a CloudSEK advisory published on April 8, the issue affects widely used Android apps and could allow attackers… Read More "Google API Keys Quietly Gain Access to Gemini on Android Devices"
Hackers backing Tehran say an uncertain ceasefire between Iran and the United States and Israel won’t end their retaliatory cyberattacks, a warning that American cybersecurity experts say potential targets in the U.S. and Israel should take seriously. One leading hacking… Read More "Shaky Ceasefire Unlikely to Stop Cyberattacks From Iran-Linked Hackers for Long"
“Assuming the BrowserGate allegations are true, LinkedIn users should consider reducing the amount of identifiable, trackable, or sensitive data their browser exposes, and organizations should treat LinkedIn as a potentially hostile web environment until facts are verified,” Levine said. “Even… Read More "Questions raised about how LinkedIn uses the petabytes of data it collects"
Have you ever received a package you never ordered? It could be a warning sign that your data has been compromised, with more fraud to follow. 23 Dec 2025 • , 5 min. read Global e-commerce sales are predicted to… Read More "What are brushing scams and how do I stay safe?"
