Threat Intelligence Center

Apple has released security updates addressing two WebKit vulnerabilities that have been discovered being actively exploited by threat actors. WebKit, the rendering engine powering Safari and other Apple applications, contained flaws that could allow attackers to execute arbitrary code and compromise device security.

Fortinet has issued an urgent warning regarding active exploitation of a critical vulnerability in FortiOS SSL VPN that allows attackers to bypass two-factor authentication protections. This vulnerability poses significant risk to organizations relying on SSL VPN for secure remote access, as threat actors are actively leveraging the flaw in the wild.

Organizations investing in attack surface management frequently struggle to articulate clear return on investment to leadership. The challenge lies in quantifying risk reduction, comparing costs against prevented incidents, and establishing meaningful metrics that bridge security outcomes with business value.

A newly identified BYOVD (Bring Your Own Vulnerable Driver) loader has emerged as a critical component in DeadLock ransomware attacks. This technique leverages legitimate but vulnerable drivers to bypass security controls and establish persistence within target environments.

RansomHouse has significantly advanced its encryption capabilities, transitioning from linear encryption methods to more sophisticated complex algorithms. This technical evolution represents a notable escalation in the threat's sophistication and potential impact on victim organizations.

National Instruments LabVIEW is widely deployed in industrial control systems, research environments, and critical infrastructure. As a visual programming platform handling sensitive operations, LabVIEW environments face distinct security challenges including network exposure, authentication weaknesses, and supply chain risks.