Critical Sitecore Zero-Day Flaw

Critical Sitecore Zero-Day Flaw

Introduction On September 3, 2025, a critical zero-day vulnerability (CVE-2025-53690) in the Sitecore Experience Platform sent shockwaves through the enterprise content management community. Exploited in-the-wild, this flaw allowed remote attackers…
Chrome 140 Stable Channel Released

Chrome 140 Stable Channel Released

On September 2, 2025, Google officially released Chrome 140 to its stable channel across desktop and mobile platforms including Windows, macOS, Linux, Android, and iOS. This update focuses on improving…
Three Major Vulnerabilities Added to CISA’s KEV Catalog

Three Major Vulnerabilities Added to CISA’s KEV Catalog

In a critical update for network defenders and security professionals, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently added three significant vulnerabilities—CVE-2020-24363, CVE-2025-55177, and CVE-2025-57819—to its Known Exploited Vulnerabilities…
Zscaler and the Salesloft Drift Supply-Chain Breach

Zscaler and the Salesloft Drift Supply-Chain Breach

In late August 2025, Zscaler, like many organizations, was affected by a wide-reaching supply-chain attack that exploited the integration between Salesloft Drift—an AI-powered sales workflow application—and Salesforce. What Was the…