NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper
A campaign exploiting the PHP2Shell flaws and a Check Point zero-day gave attackers root on Security Gateways, then wiped VMware ESXi hosts.…
Hardening a Personal Linux Server in an Afternoon
A fresh Debian or Ubuntu server can be locked down in one afternoon with standard tools. This guide covers key-only SSH, a…
Microsoft 365 outage disrupts Outlook, Teams, and Copilot worldwide
Microsoft is investigating a widespread Microsoft 365 outage that has disrupted Outlook, Teams, Copilot, and other services, with the company attributing the…
Check Point patches zero-day root escalation flaw exploited against customers
Check Point has issued emergency hotfixes for CVE-2026-123039, a local privilege escalation flaw in its Gaia OS that attackers have used since…
Hackers Compromise 4,800 GitHub Accounts to Steal Cloud Credentials
A campaign dubbed wfx-loot abused compromised GitHub accounts to inject malicious workflows that harvest CI secrets and cloud credentials from at least…
How to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an Afternoon
This guide walks through placing a reverse proxy in front of your self-hosted apps, enforcing single sign-on with two-factor authentication, and automatically…
Baker Tilly notifies clients of data breach at third-party provider
The U.S. accounting firm is alerting clients that personal data, including Social Security numbers, was exposed through a platform run by an…
Critical Apache HTTP/2 Flaw Allows Unauthenticated Remote Code Execution
A critical vulnerability in Apache HTTP Server's mod_http2 module, tracked as CVE-2026-119618, could let an unauthenticated remote attacker execute code on affected…
eMudhra Revokes 8 More CA Certificates After Private Key Handling Failure
eMudhra has revoked eight additional intermediate CA certificates, bringing the total affected to 16, after an investigation traced weak and improperly handled…
Hardening a Self-Hosted Web Service Behind a Reverse Proxy with Zero-Trust Access
Learn how to put a self-hosted app behind a reverse proxy with automatic TLS, add single sign-on with MFA in front of…
Railway Breach Exposed Customer AI Keys, Leading to Estimated $740,000 in Unauthorized Charges
Platform-as-a-service provider Railway says stolen AI provider keys from an October breach were used to run up roughly $740,000 in unauthorized usage,…
Microsoft Fixes Exchange Sign-In Failures Caused by October Windows Server Updates
Microsoft has resolved Outlook on the web sign-in and mail delivery problems on on-premises Exchange servers that followed the October 2026 Windows…