Blumira Briefings

Welcome to Blumira Briefings, your weekly download of the top headlines and trends for your security practice! In this week's edition:  - F5 Emergency Patch for BIG-IP APM Zero-Day: Unauthenticated Remote Code Execution Under Attack  - Chinese State-Aligned Hackers Exploit Chrome and Windows Zero-Days in New Attacks  - Sophisticated Infostealer Impersonates LastPass on GitHub, Disables Wide R...

Welcome to Blumira Briefings, your weekly download of the top headlines and trends for your security practice! In this week's edition: - Apple has addressed more than 260 CVEs across all of its operating systems, browsers, and other software products, marking the largest single patch cycle in Cupertino's history. - Critical ConnectWise ScreenConnect Vulnerability Actively Exploited; Orga...

Welcome to Blumira Briefings, your weekly download of the top headlines for your security practice! In this week's edition: - Critical Remote Code Execution Vulnerability in Gitea Actively Exploited, CISA Warns  - Critical WordPress SAML Plugin Authentication Bypasses Actively Exploited While Unpatched  - Microsoft Advises Network Controls as Vulnerability Patching Window Rapidly Shrinks Sour...

Welcome to Blumira Briefings, your top headlines and trends for your security practice! This week: - Microsoft fixes record number of vulnerabilities in July Patch Tuesday, including actively exploited zero-days.  - Microsoft mandates passkeys as default authentication method for Entra ID by September 2026.  - Attackers now using artificial intelligence to create custom PowerShell reconnaissance m...

Welcome to Blumira Briefings, your weekly download of the top headlines and trends for your security practice! In this week's edition:  - CISA Confirms Microsoft Defender Flaw Actively Exploited in Ransomware Campaigns for System Access  - Critical SimpleHelp Authentication Bypass Actively Exploited, Puts Managed Service Providers at Risk  - Advanced Phishing Kit Resembles Business Email Comp...

Welcome to Blumira Briefings, your weekly download of the top headlines and trends for your security practice! This week: - Cyber Broker Exposes Access to Over 73,000 Fortinet Firewalls for Sale  - New Mistic Remote Access Trojan Utilized by Ransomware Initial Access Brokers in Active Campaigns  - Supply Chain Attack Infects WordPress Plugins, Stealing Credentials and 2FA Secrets Sources: FortiBle...

Welcome to Blumira Briefings, your weekly download of the top headlines and trends for your security practice! In this week's edition: - CISA Directs Agencies to Patch Actively Exploited Cisco and cPanel Vulnerabilities This Week  - FortiSandbox Vulnerabilities Actively Exploited, Urgent Patching Recommended for Critical Flaws  - Rokarolla Android Trojan Actively Spreads, Stealing Banking and...

Welcome to Blumira Briefings, your top headlines and trends for your security practice! In this week's episode: - FBI Alert: New Kali365 Phishing Kit Bypasses Multi-Factor Authentication for Microsoft 365 - Critical Remote Code Execution Flaw in Microsoft SharePoint Requires Immediate Patching - Automated Attacks Target Over 30,000 Exposed Databases Globally with Ransom Demands Have a securit...

Welcome to Blumira Briefings, your top headlines and trends for your security practice. This week's episode: - Government Contractor Exposes Sensitive CISA and AWS GovCloud Credentials on Public GitHub - Drupal Issues Critical Security Update Amid Warnings of Rapid Exploit Development Risk - Shai-Hulud Worm Clones Emerge After Source Code Leak, Intensifying NPM Supply Chain Attacks Have a sec...

Welcome to Blumira Briefings, your top headlines and trends for your security practice. This week's episode: - ‘Mini Shai-Hulud’ Malware Compromises Hundreds of Open-Source Software Packages in Supply Chain Attack - Researcher Releases Proof-of-Concept for BitLocker Bypass and Privilege Escalation on Windows Systems  - Patch Tuesday, Accelerating Attacks, and AI Vulnerability Discovery Have a...

Welcome to Blumira Briefings, your top headlines and trends for your security practice. This week's episode: - A critical authentication bypass vulnerability, identified as CVE-2026-41940, in cPanel and WHM software is currently being actively exploited by threat actors. - Microsoft has unveiled details of a sophisticated global phishing campaign that successfully targeted over 35,000 users a...

Welcome to Blumira Briefings, your top headlines and trends for your security practice. This week's episode: - The U.S. Cybersecurity and Infrastructure Security Agency has added two critical vulnerabilities to its Known Exploited Vulnerabilities catalog, signaling active exploitation - A severe SQL injection vulnerability, identified as CVE-2026-42208, in BerriAI's LiteLLM Python packag...

Welcome to Blumira Briefings, your top headlines and trends for your security practice. This week's episode: - Microsoft has released its April 2026 Patch Tuesday updates, addressing a record 167 security vulnerabilities across its product portfolio. - Security researchers have identified prompt injection vulnerabilities in prominent enterprise artificial intelligence (AI) agents, specificall...

Welcome to Blumira Briefings, your top headlines and trends for your security practice. This week's episode: - A critical and unpatched vulnerability, named "BlueHammer," has been publicly disclosed for Microsoft Windows operating systems, allowing a local attacker to gain elevated privileges up to a system-level account. - A sophisticated espionage campaign, attributed to the Russi...

Axios Compromised, Chrome Zero-Day, and WhatsApp Malware - Blumira Briefings Welcome to Blumira Briefings, your top headlines and trends for your security practice. This week's episode: - The npm account for Axios, a JavaScript library with over 100 million weekly downloads, was compromised by threat actors who published malicious versions (1.14.1 and 0.30.4) containing remote access trojan (...

Welcome to Blumira Briefings, your weekly download of the top headlines and trends for your security practice. This week's episode: - The U.S. Federal Communications Commission, a government agency that regulates interstate and international communications, recently announced a significant new policy. The commission is banning the import of all new foreign-made consumer routers into the Unite...

Welcome to Blumira Briefings, your top headlines and trends for your security practice. This week's episode: - ClickFix attacks evolve techniques targeting macOS and Windows users with AI-based lures - A targeted voice phishing attack has led to unauthorized access to about 900,000 records at identity protection firm Aura - RondoDox attacks are becoming more focused and strategic, targeting 1...

Welcome to Blumira Briefings, your top headlines and trends for your security practice. This week's episode: - Salesforce warns that a threat campaign is exploiting overly permissive Experience Cloud guest configurations to harvest data from public portals. - Cybersecurity researchers have discovered five malicious Rust crates that masquerade as time-related utilities to transmit .env file da...

Welcome to Blumira Briefings, your top headlines and trends for your security practice. This week's episode: - Pro-Russia threat actors have formed a loose coalition with Iran-nexus hacking groups in response to the bombing campaign launched by the U.S. and Israel on Iran. - Hackers are abusing the legitimate OAuth redirection mechanism to bypass phishing protections in email and browsers to...

Welcome to Blumira Briefings, bringing you a weekly download of the top headlines and trends for your security practice. *This week's episode:* -  Another software supply chain hit: Typosquatted npm packages are harvesting creds and propagating through dev environments. - Tax season is open season for threat actors: refund hijacking, credential phishing, and payroll fraud risks are escalating...

Welcome to Blumira Briefings, your weekly download of the top headlines and trends for your security practice. In this week's episode: -  Threat actor group GS7 impersonates Fortune 500 companies (incl. Wells Fargo, USAA, Navy Federal, and Fidelity) using spoofed domains with highly accurate cloned login portals. - Hudson Rock detected the first known case of infostealer malware successfully...

Welcome to Blumira Briefings, your top headlines and trends for your security practice. This week's episode: - Microsoft released security updates to address a set of 59 flaws across its software, including six vulnerabilities that it said have been exploited in the wild - A fake 7-Zip website is distributing a trojanized installer of the popular archiving tool that turns the user’s computer...

Welcome back to this week's Blumira Briefings, your top headlines and trends for your security practice. In this episode: - SolarWinds Web Help Desk critical vulnerabilities allowing unauthenticated remote code execution - Microsoft's warning about sophisticated infostealer campaigns targeting macOS, Python apps, and messaging platforms - Emerging threat vector: AI agents with privileged...

Blumira Briefings are back for 2026 with a svelte new runtime to get you the critical security developments you need to know about even faster. In this episode:  - Microsoft 365 services being exploited in sophisticated Adversary-in-the-Middle phishing campaigns - Active Directory vulnerability involving the 'primaryGroupID' attribute that could enable privilege escalation - Emerging sec...

🔔Welcome back for this week’s Blumira Briefings! This week, we're joined by Jake Ouellette and Mike Toole to break down the week's most important security headlines with context to help your security practice. 🔔 What We Cover This Week: 🔥 WatchGuard critical vulnerability fix for Firebox firewalls with 9.3 CVSS score  🛡️ SonicWall releases firmware update to remove OVERSTEP rootkit fr...