Surviving the Mythos Era: Richard Bejtlich on the Case for NDR https://firewalls.firm.in/wp-content/uploads/2026/06/corelight.jpg Despite the abundance of telemetry at analysts’ disposal, many security operations teams struggle to answer a few basic questions during incident investigation: What happened? What evidence do we have? How do we know we’re seeing it all, in context? Answering these questions requires teams to go beyond alerts, ...
Read More »Vulnerabilities & Exploits
When the breach doesn’t happen, the real warning begins
When the breach doesn’t happen, the real warning begins https://etimg.etb2bimg.com/thumb/msid-131169830,imgsize-6906,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/when-the-breach-doesnt-happen-the-real-warning-begins.jpg In cybersecurity, the incident that makes headlines is usually the one that succeeds. The ransomware spreads, the systems go down, the data leaks, and the postmortem begins. But some of the most important warnings arrive earlier, in quieter form. A phishing payload slips through but gets stopped on execution. A ...
Read More »AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.
AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It. https://firewalls.firm.in/wp-content/uploads/2026/06/watch.jpg AI-driven exploitation timelines are rapidly shrinking, and they are not going to stop shrinking. Vulnerabilities are being discovered, reproduced, and weaponized faster than ever in the history of enterprise security. As a result, the window between a vulnerability being disclosed and indiscriminate exploitation observed across the internet is ...
Read More »AI-related data breaches surging
AI-related data breaches surging https://etimg.etb2bimg.com/thumb/msid-131215633,imgsize-57236,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/ai-related-data-breaches-surging.jpg Hackers are increasingly using AI to detect software vulnerabilities, which has shortened the time that targets have to respond to threats, Verizon said in an annual report tracking data breaches. Verizon said using software flaws in data surpassed stolen credentials for the first time. It said in a review of more than 31,000 incidents, 31% ...
Read More »NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE
NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE https://firewalls.firm.in/wp-content/uploads/2026/05/nginx.jpg Ravie LakshmananMay 17, 2026Server Security / Vulnerability A newly disclosed security flaw impacting NGINX Plus and NGINX Open has come under active exploitation in the wild, days after its public disclosure, according to VulnCheck. The vulnerability, tracked as CVE-2026-42945 (CVSS score: 9.2), is a heap buffer overflow ...
Read More »Anthropic leak exposes Claude Code source
Anthropic leak exposes Claude Code source https://etimg.etb2bimg.com/thumb/msid-130070794,imgsize-17066,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/anthropic-leak-exposes-claude-code-source.jpg American AI company Anthropic has been one of the most-vocal supporters of banning export of American AI software and hardware to China. So much so that it’s CEO Dario Amodei has called China an adversarial nation” on numerous occasions. Like Microsoft-backed OpenAI and Alphabet’s Google, Anthropic has not made its services available in ...
Read More »New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution
New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution https://firewalls.firm.in/wp-content/uploads/2026/05/exim.jpg Ravie LakshmananMay 12, 2026Vulnerability / Email Security Exim has released security updates to address a severe security issue affecting certain configurations that could enable memory corruption and potential code execution. Exim is an open-source Mail Transfer Agent (MTA) designed for Unix-like systems to receive, route, and deliver email. ...
Read More »Vercel data breach: How hackers targeted the cloud company and offered its data for sale for $2 million
Vercel data breach: How hackers targeted the cloud company and offered its data for sale for $2 million https://etimg.etb2bimg.com/thumb/msid-130431427,imgsize-5766,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/vercel-data-breach-how-hackers-targeted-the-cloud-company-and-offered-its-data-for-sale-for-2-million.jpg American cloud development platform Vercel on Sunday confirmed a security breach allowing an attacker to gain unauthorised access to data for a “limited subset of customers”. “We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems. We ...
Read More »Cybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion Attacks
Cybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion Attacks https://firewalls.firm.in/wp-content/uploads/2026/05/vishing.jpg Ravie LakshmananMay 01, 2026Malware / Social Engineering Cybersecurity researchers are warning of two cybercrime groups that are carrying out “rapid, high-impact attacks” operating almost within the confines of SaaS environments, while leaving minimal traces of their actions. The clusters, Cordial Spider (aka BlackFile, CL-CRI-1116, O-UNC-045, and UNC6671) ...
Read More »US security company ADT confirms hacking incident, says some customer data stolen
US security company ADT confirms hacking incident, says some customer data stolen https://etimg.etb2bimg.com/thumb/msid-130543679,imgsize-86843,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/us-security-company-adt-confirms-hacking-incident-says-some-customer-data-stolen.jpg ADT, one of the largest home security providers in the US, has confirmed that hackers successfully broke into its systems and stole customer information like their phone numbers and addresses. The announcement comes as a notorious extortion group, known as ShinyHunters, threatens to leak millions of records ...
Read More »
Firewall Security Company India Complete Firewall Security Solutions Provider Company in India











