Blog
Cybersecurity
Tips and strategies to protect against cyber threats and maintain online security.
8 November 2026
Barracuda: two chained flaws grant root without login
Two vulnerabilities in Barracuda Email Security Gateway allow unauthenticated command execution as root. Barracuda has already released the patches.
5 November 2026
Cyber threats of October 2026: how to protect your SME
October 2026 brought a new wave of cyber threats that exploit trusted platforms and workflows. We analyze the impact on SMEs and what measures to adopt.
5 November 2026
When the cold gets hacked: lessons from the attack on the French blood bank
A cyberattack manipulates the refrigeration chambers of the French Blood Service through its external provider. What it means for SMEs and how to secure OT.
5 November 2026
Cybersecurity in SMEs: from firewall to business risk
Security stops being a technical patch and moves into management conversations. Key points for SMEs: identity, data, AI and resilience.
31 October 2026
Ivanti Connect Secure: three chained flaws grant unauthenticated root
CISA adds two Ivanti Connect Secure vulnerabilities to its actively exploited catalog. We analyze the real risk for SMBs and what to patch first.
29 October 2026
KeyDrift: the malware that steals keys in Cisco SD-WAN
Cisco Talos reveals that a critical Catalyst SD-WAN flaw, patched in February, was exploited to install KeyDrift and copy the keys that encrypt traffic between sites.
29 October 2026
Oracle patches 1,295 flaws and six are critical: check your ERP now
Oracle's October Critical Patch Update fixes 1,295 vulnerabilities, six with a maximum score. We analyze the real impact on SMBs and what to do now.
28 October 2026
PHP2Shell: AI-assisted attack compromises 25 servers and a government network
A China-linked actor combined PHP2Shell with kernel privilege escalation to take over 25 servers and a U.S. government network.
27 October 2026
Keystone to Destroy 18,835 Wallets After Theft of Verification Key
An attacker accessed Keystone's website and obtained the key that certifies its hardware wallets. The company will destroy 18,835 devices and absorb the cost.
25 October 2026
Fortinet and Palo Alto in the crosshairs: 70,000 credentials exposed
A massive campaign against firewalls and perimeter VPNs has exposed more than 70,000 credentials. We analyze the impact for SMEs and what measures to take.
23 October 2026
Zero-day in VeloCloud: a read-only account is enough to become an operator
Arista warns of an SQL injection exploited in VeloCloud Orchestrator: a user with read-only permissions can escalate to operator. Key points for SMBs.
20 October 2026
APT28 attacks NATO: what the Swallowtail case teaches your SME
The Russian group APT28 compromises a NATO naval shipbuilder with the HOOKEDGE backdoor and a new loader. We analyze what this implies for an SME and how to respond.