Multi-cloud security, FortiGate hardening, AD/identity risk, and configuration drift. Written by operators for operators.
A coordinated wave of security fixes hits five major vendors, led by a CVSS 9.6 flaw in Ivanti Xtraction. Patch queues just got longer.
A researcher-released PoC exploit dubbed 'MiniPlasma' achieves SYSTEM-level privilege escalation on fully patched Windows systems, with no vendor fix available yet.
FortiGate and Active Directory audits now include full policy simulation in Retrievy. Showing which GPOs actually win, which firewall rules have no profile attached, and where your passing compliance checks are covering for real exposure.
Microsoft's latest Patch Tuesday delivers fixes for 138 CVEs — 30 rated Critical — with remote code execution flaws in DNS Server and Netlogon demanding immediate operator attention.
A researcher known as Chaotic Eclipse has dropped two unpatched Windows zero-days — dubbed YellowKey and GreenPlasma — hitting BitLocker's encryption guarantees and CTFMON's privilege boundary.
Google has identified a threat actor using a zero-day exploit likely built with AI assistance — the first confirmed in-the-wild use of AI for vulnerability discovery and exploit generation, targeting 2FA mechanisms.
Fortinet has disclosed critical remote code execution flaws in FortiSandbox and FortiAuthenticator. Operators running either product should treat patching as an emergency change.
Cached credentials and live Kerberos tickets mean a compromised AD account stays exploitable long after a password reset. Here's what operators need to do instead.
CISA ordered federal agencies to patch an actively exploited Ivanti EPMM zero-day within four days. If you run EPMM in any environment, that timeline should be yours as well.
Attackers don't ignore your backups — they hunt them down before triggering encryption. Here's why most backup strategies fail at exactly the moment they're needed most.
Iranian threat group MuddyWater is deploying Chaos ransomware as a distraction while conducting actual espionage via Microsoft Teams social engineering — a double-layer deception operators need to account for.
