Cyberside Chats: Cybersecurity Insights from the Experts

No password was guessed, no MFA prompt fired, no vulnerability was exploited — and an attacker still walked into hundreds of Microsoft 365 tenants as the ConnectWise Cloud Backup application. One vendor credential, most likely a stolen certificate, worked against every customer that had ever consented to the app. Inside, the attacker made ConnectWise’s own apps Global Adminis...

LMG Security's 2026 Penetration Testing Report, Patched and Still Breached, is out now. Download it free: https:...

On October 21, the PHP project shipped an emergency fix for two critical bugs, nicknamed PHP2Shell, that let an unauthenticated attacker run code on a web server with a single crafted file upload. PHP runs roughly 70% of the web. Governments pulled websites offline, a major HR platform went dark, and attack attempts were hitting sensors hours before a patch existed.

Yo...

This weekend, attackers broke into the refrigeration controllers at hundreds of French supermarkets and turned the freezers into heaters. Alarms reached some store managers in time; in other stores nobody was paged, and many had to throw out all their fresh and frozen food. Researchers had published the flaws in these exact controllers two months earlier and found more than 2...