Estimated reading time: 4 minutes
CVE-2026-3854 exposed a critical trust-boundary failure in the GitHub Enterprise Server (GHES) push pipeline. A value supplied through a standard Git push option could be copied into internal, semicolon-delimited metadata and later interpreted as trusted configuration. For organizations that...Estimated reading time: 5 minutes
Banks have invested heavily in securing their internal IT infrastructure, endpoints, applications, and networks. However, cyber risks do not always originate inside the organisation. Attackers increasingly target a bank’s external digital presence, including websites, domains, social media accounts, mobile...
Estimated reading time: 6 minutes
A technical walkthrough from runtime preparation and network-share discovery to concurrent file encryption DragonForce is a Ransomware-as-a-Service (RaaS) operation that first surfaced in mid-to-late 2023. It initially presented itself as a hacktivist collective before shifting to a profit-driven model....