Resources

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 (stable) and 1.31.3 (mainline), and in NGINX Plus 37.0.3.1; anyone on an earlier build should upgrade.

Triggering it can crash or restart the worker, causing a denial of

Related resources

2 August 2025

CL-STA-0969 Installs Covert Malware in Telecom Networks During 10-Month Espionage Campaign

Telecommunications organizations in Southeast Asia have been targeted by a state-sponsored threat actor known as CL-STA-0969 to facilitate remote control over compromised networks. Palo Alto Networks Unit 42 said it […]

9 July 2026

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Datadog Security Labs is warning of “several overlapping campaigns” that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. “Operators rely on automated scraping tooling with […]

12 February 2026

The CTEM Divide: Why 84% of Security Programs Are Falling Behind

A new 2026 market intelligence study of 128 enterprise security decision-makers (available here) reveals a stark divide forming between organizations – one that has nothing to do with budget size […]

Google’s Gemini lets strangers send messages from your locked Android phone

Sophos Trusted Code

Resources

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

Related resources

CL-STA-0969 Installs Covert Malware in Telecom Networks During 10-Month Espionage Campaign

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

The CTEM Divide: Why 84% of Security Programs Are Falling Behind

Links

Enterprise Solutions

SMB Solutions

Contact Us

Follow Us