InfoSec.Watch

Fast, clear cybersecurity insights on threats, vulnerabilities, and industry news.
Latest

InfoSec.Watch - Issue #153Aug 31, 2026
Issue #153 connects PaperCut’s active exploitation, the QTFY disruption, and Boston Scientific’s global network outage through one operational problem: systems that look like supporting infrastructure can inherit outsized authority or business dependency. Defenders should map not only what is exposed, but what each control surface can make other systems do—and how far failure can travel when that trust is abused.
Read More
InfoSec.Watch - Issue #152Aug 24, 2026
This week is best read as a clock. Malicious Rust crates were live on crates.io for roughly 86 to 107 minutes. CISA moved Zimbra’s command-injection flaw into the exploited catalog four days after CERT Polska reported attacks, and moved four already-patched Microsoft, VMware, and Apple flaws in on a single day. The gap between a fix existing and an exploit running is now measured in hours and days, and the defender question has shifted from whether to patch to how much of the window you can still account for.
Read More
InfoSec.Watch - Issue #151Aug 17, 2026
This week’s highest-priority stories all start with attacker-controlled input crossing a trusted boundary: a job lure that ends in kernel access, a crafted request that can drop a VPN gateway, and a meeting message that can execute code on another participant’s device. The practical lesson is to rank exposure by what external users are allowed to make trusted software parse—not just by CVSS.
Read More
InfoSec.Watch - Issue #150Aug 10, 2026
This week’s strongest signals came from platforms attackers can use to multiply a single foothold. N-able’s N-central incident exposed a path from remote management into managed endpoints; Metabase’s zero-day put connected data stores in reach; and UNC6671 used helpdesk vishing to steal cloud sessions before automating exfiltration. The recurring risk is what legitimate enterprise tooling can do at scale once control is lost.
Read More
InfoSec.Watch - Issue #149Aug 3, 2026
This week’s most consequential signals came from systems that sit between users and critical operations: water-sector PLCs, firewall management, image processing, and third-party cloud storage. Attacks degraded water operations in multiple states, Cisco confirmed exploitation of a static credential in FMC, Rails warned that image variants could expose application secrets, and Amgen disclosed material data theft. The common question for defenders is not only what is exposed, but how much authority each intermediary inherits.
Read More
Load more