CybersecurityAt least 41 manufacturers across Germany, Poland and the Netherlands have been hit since 2 July, with the operators abusing legitimate backup agent credentials.
CybersecurityAn authentication bypass in the appliance's session handler allowed unauthenticated attackers to mint valid tokens for any user.
CybersecurityThree large retailers were compromised in July through MFA resets granted over the phone to convincing callers.
CybersecurityThe trade-off is a new operational burden: the pipeline itself now needs testing, versioning and on-call ownership.
Unauthenticated session-token forgery in the appliance login handler.
Northgate SecureEdge 9.x
Admission webhook bypass allows cross-namespace pod scheduling.
TenantMesh Operator 4.2
Retention policy can be altered by a low-privileged backup service account.
VaultLine Backup 12.6
Grace Nwosu • • 5 min read
Mara Ellison • • 7 min read
Daniel Okonjo • • 9 min read
Priya Raghunathan • • 6 min read
Tomas Berg • • 8 min read
