Flash Notices | Marketing

| Nov 19, 2025

Flash Notice: Kraken Ransomware Group: Big-Game Hunting and Double Extortion Tactics

This report provides a detailed investigation into the Kraken ransomware group - their operations, methods, and the broader implications for cybersecurity.

| Nov 12, 2025

Flash Notice: Simple User Capabilities WordPress Plugin – Critical Privilege Escalation Vulnerability

CVE-2025-12158 is a critical privilege escalation vuln. affecting the Simple User Capabilities WordPress plugin (all versions up to + including 1.0).

| Nov 5, 2025

Flash Notice: Dataphone A920 Improper Packet Validation

CVE-2025-61235 is a critical vulnerability affecting the Dataphone A920 firmware arising from improper validation of network packet input.

| Oct 28, 2025

Flash Notice: Critical Remote Code Execution in Oracle Marketing (E-Business Suite)

CVE-2025-53072 is a critical unauthenticated RCE vulnerability affecting the Marketing Admin module of Oracle Marketing, part of Oracle E-Business Suite.

| Oct 14, 2025

Flash Notice: Attackers Abuse Velociraptor - Open-Source Tool Used in Targeted Ransomware Campaigns

Cisco Talos has confirmed that ransomware operators are weaponizing Velociraptor, an open-source DFIR tool, to aid in the deployment of ransomware attacks.

| Oct 7, 2025

Flash Notice: Google Salesforce Breach - An In-Depth Analysis of UNC6040's Extortion Campaign

In June 2025, Google’s internal Salesforce instance, used for managing SMB data, was breached in a cyberattack orchestrated by the UNC6040 threat group.

| Sep 30, 2025

Flash Notice: AI vs. AI - Microsoft’s Battle Against AI-Obfuscated Phishing Campaigns

Microsoft Threat Intelligence recently shut down a credential phishing campaign employing AI to obfuscate attack payloads and evade conventional defenses.

| Sep 22, 2025

Flash Notice: Google Releases Patch for Actively Exploited Chrome Zero-Day

Google has urgently released a security update to address a critical zero-day vulnerability (CVE-2025-10585) in its Chrome web browser.

| Sep 15, 2025

Flash Notice: Hackers Hijack NPM Packages - Multi-Billion Weekly Downloads Targeted in Supply Chain Attack

A major software supply chain attack has shaken the open-source JavaScript ecosystem, as attackers hijacked several high-profile npm packages.

| Sep 4, 2025

Flash Notice: Critical Memory Overflow in Citrix NetScaler ADC & Gateway

CVE-2025-7775 is a critical memory overflow vulnerability in Citrix NetScaler ADC and NetScaler Gateway that enables unauthenticated RCE and/or DoS.

Prev 1 2 3 4 Next

Governance, Risk & Compliance

Attack Surface Management

Managed XDR & SecOps

Microsoft Security Solutions

Building Trust Over Time: SOC 2 and the Importance of Annual Audits

Your header 1 goes here

Flash Notice: Kraken Ransomware Group: Big-Game Hunting and Double Extortion Tactics

Flash Notice: Simple User Capabilities WordPress Plugin – Critical Privilege Escalation Vulnerability

Flash Notice: Dataphone A920 Improper Packet Validation

Flash Notice: Critical Remote Code Execution in Oracle Marketing (E-Business Suite)

Flash Notice: Attackers Abuse Velociraptor - Open-Source Tool Used in Targeted Ransomware Campaigns

Flash Notice: Google Salesforce Breach - An In-Depth Analysis of UNC6040's Extortion Campaign

Flash Notice: AI vs. AI - Microsoft’s Battle Against AI-Obfuscated Phishing Campaigns

Flash Notice: Google Releases Patch for Actively Exploited Chrome Zero-Day

Flash Notice: Hackers Hijack NPM Packages - Multi-Billion Weekly Downloads Targeted in Supply Chain Attack

Flash Notice: Critical Memory Overflow in Citrix NetScaler ADC & Gateway

Cybersecurity Solutions

Company

Sign up for weekly Flash Notices, tips and security news.