Home

vulnerability

View All cybersecurity cloud cloud-security zero-trust security-architecture network-security security-operations vulnerability iam ai-security

img of Critical SharePoint Zero-Day Under Attack: Action Plan for CVE-2025-53770

Jul 24, 2025 6 min read

vulnerability

Critical SharePoint Zero-Day Under Attack: Action Plan for CVE-2025-53770 By William OGOU

Critical SharePoint RCE (CVE-2025-53770): What SecOps teams must do right now, from patching to hunting the 'ToolShell' campaign. Your immediate action plan.

img of Critical SharePoint RCE (CVE-2025-53770)

Jul 21, 2025 7 min read

vulnerability

Critical SharePoint RCE (CVE-2025-53770) By William OGOU

Critical, actively exploited zero-day RCE vulnerability in SharePoint Server (CVE-2025-53770). This is your guide to understanding, identifying, and mitigating the threat immediately.

img of Cache Me If You Can: Smuggling Malware Through Browser

Jun 29, 2025 8 min read

vulnerability

Cache Me If You Can: Smuggling Malware Through Browser By William OGOU

Discover Browser Cache Smuggling, a stealthy attack that uses your browsers cache to deliver malware and hijacks trusted apps like Microsoft Teams. Learn how it works and how to defend against it.

img of BadSuccessor: Unmasking a Critical Privilege Escalation in Active Directory

Jun 3, 2025 11 min read

vulnerability

BadSuccessor: Unmasking a Critical Privilege Escalation in Active Directory By William OGOU

Uncover BadSuccessor: a critical Active Directory privilege escalation vulnerability in Windows Server 2025's dMSA feature. Learn how it works, detection, and mitigation.

img of Critical Remote Code Execution (CVE-2025-34028) in Commvault Command Center

Apr 25, 2025 3 min read

vulnerability

Critical Remote Code Execution (CVE-2025-34028) in Commvault Command Center By William OGOU

Critical Commvault vulnerability (CVE-2025-34028) allows unauthenticated RCE in Command Center. Patch immediately to prevent full system compromise.

img of ConfusedComposer: GCP Cloud Build vunerability via PyPI Packages

Apr 23, 2025 9 min read

vulnerability

ConfusedComposer: GCP Cloud Build vunerability via PyPI Packages By William OGOU

Unpacking ConfusedComposer: Discover how Tenable found a GCP vulnerability allowing privilege escalation via malicious PyPI packages in Cloud Composer & Cloud Build.