DefendEdge Cyber Security Blog
Zero-Click to Root: SonicWall VPN Gateways Under Active Ransomware Siege
INC Ransomware exploits SonicWall SMA flaws for zero-click root access while N-able and Wi-Fi gateways face parallel attacks—edge devices are the new frontline.
AI Data Loss and Exposure: The New Threat Frontier
AI models are being hijacked to steal data, autonomous agents are breaking into servers, and employees feeding sensitive information into AI tools are creating a new category of data loss that traditional security tools were never designed to catch.
CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs
CISA is currently observing a significant increase in cyber threat actors targeting programmable logic controllers (PLCs) in the Water and Wastewater Systems (WWS) Sector. CISA urges critical infrastructure owners, operators, and integrators to remove publicly exposed PLCs and other operational technology (OT) from the internet as soon as possible. Threat actors targeting exposed PLCs have…
Vulnerability Summary for the Week of July 20, 2026
High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info @fastify/static–@fastify/static @fastify/static up to and including version 10.1.0 fails to reject dot-dot path segments in request pathnames before the file-resolution stage. This is a bypass of the earlier fix for CVE-2026-6414, which only covered encoded forward slashes. Because the underlying send library normalizes dot…
The Complete Guide to 24/7 Threat Monitoring Services
24/7 threat monitoring is essential for detecting cyberattacks in real time. Learn what it covers, why it matters, and how to choose a provider.
Managed Detection and Response: Your 24/7 Cybersecurity Shield
MDR combines 24/7 monitoring, threat hunting, and rapid response to contain cyber threats before they cause damage. Learn why it’s essential.
Why a US-Based Security Operations Center Matters for Your Business
A US-based Security Operations Center provides compliance, cleared personnel, and real-time communication advantages that offshore SOCs cannot match.
Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite
Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite Executive summary A group of Russian state-supported cyber actors has been targeting and compromising various Western government and commercial organizations using the Zimbra Collaboration Suite (ZCS) software since at least July 2025. The Russian state-supported advanced persistent threat (APT) group’s activity is…
Vulnerability Summary for the Week of July 13, 2026
High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info @fastify/http-proxy–@fastify/http-proxy Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix segment is URL-encoded. Fastify’s router URL-decodes paths for route matching, but request.url retains the original encoded form, and the prefix-rewrite step uses a literal string replace…
Vulnerability Summary for the Week of July 6, 2026
High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 1Panel-dev–MaxKB MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import functionality in apps/tools/serializers/tool.py and MCP referencing mode in apps/application/chat_pipeline/step/chat_step/impl/base_chat_step.py do not consistently validate MCP transport type, allowing an authenticated user to import a .tool file containing stdio transport with…