Industry updates, security alerts, and analysis from an IT professional
RansomHouse RaaS operation deploys new 'Mario' encryptor featuring dual-key encryption, dynamic chunk sizing, and enhanced anti-analysis capabilities targeting VMware ESXi environments.
Hackers are actively exploiting CVE-2025-59718 and CVE-2025-59719 to bypass FortiCloud SSO authentication and steal firewall configuration files from multiple Fortinet products.
Microsoft announces that devices running Exchange ActiveSync versions below 16.1 will lose access to Exchange Online after March 1, 2026, affecting millions of mobile email users.
700Credit reveals massive data breach affecting 5.8 million people after attackers exploited an API vulnerability through a compromised integration partner.
Recent Windows 11 security updates are causing VPN connectivity failures for enterprise users running Windows Subsystem for Linux with mirrored mode networking.
A new 'ConsentFix' attack tricks users into granting full Microsoft account access through Azure CLI OAuth flows—no password theft or MFA bypass required.
Fortinet releases patches for two critical 9.1 CVSS authentication bypass vulnerabilities affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager.
Microsoft's final Patch Tuesday of 2025 addresses 57 vulnerabilities including three zero-days—one actively exploited in attacks.