CVE-2025-26399: Critical Unauthenticated RCE in SolarWinds Web Help Desk Through Second Bypass

On September 23, 2025, SolarWinds released a hotfix for a critical vulnerability impacting Web Help Desk (WHD), tracked as CVE-2025-26399. The vulnerability arises from a deserialization flaw in the AjaxProxy component that could allow a remote unauthenticated threat actor to achieve remote code execution. CVE-2025-26399 is the second bypass of a flaw originally disclosed last year as CVE-2024-28986 within WHD, with the first bypass being CVE-2024-28988.

No More Ransom: Why the UK's Crackdown Signals the End of Paying Hackers

For years, ransomware gangs have thrived by holding businesses hostage, forcing a terrible choice: pay up or watch your systems collapse. That era is ending. After a summer of cyber chaos that hit everything from the NHS to Harrods, the UK government has drawn a red line: no more quiet payoffs, no more sweeping attacks under the rug.

MSP Zero Trust Analysis Map

Uncovering your clients’ hidden security gaps just got easier. Our new Zero Trust Gap Analysis Map helps you quickly identify where your clients are vulnerable, turning a complex topic into a clear, actionable conversation. In this video, we'll show you how to use this free, five-minute Google Sheets-based tool to assess a client's Zero Trust readiness. You'll learn how to pinpoint critical security gaps in key areas like identity, devices, and networks, generating an easy-to-read dashboard that highlights their biggest risks.

The Complete Guide to PCI DSS Compliance Certification in 2025

The stakes for protecting payment data have never been higher. In 2024, the global average cost of a data breach reached $4.88 million, a 10% increase over the previous year (IBM). For any business handling credit card transactions, PCI DSS compliance certification is essential to safeguard customer trust, meet regulatory obligations, and prevent costly breaches.

What Is The Best Cloud Storage for Sensitive Data?

Cloud storage can offer us the best protection against data breaches, more privacy online, and a means to protect our photos, videos, and more to ensure we never lose access to our important files. However, due to the many options we have when choosing cloud storage, you may be left wondering which is the best cloud storage for sensitive data, and how these differ from the main cloud storage providers, such as Google or OneDrive.

Enterprise Digital Asset Security with Fireblocks and Thales

In the rapidly evolving digital asset landscape, one truth remains constant: security cannot be an afterthought. For regulated institutions navigating the complexities of digital asset adoption, the challenge goes beyond embracing innovation. It’s about doing so within the rigid frameworks of compliance, audit requirements, and risk management that define institutional operations.

Tools That Help You View Difficult Content Safely

When your job involves looking at distressing or graphic material, there are ways to reduce the impact. Therapist Eve Parmiter shares practical tools and techniques – like muting audio, using blur overlays, or limiting your screen view – that help professionals stay regulated while still doing the work.#CyberSecurity.

Help Has Arrived: The Essential Compliance Guide for New Government Contractors

Starting your journey as a government contractor can feel overwhelming. Between complex regulations, strict reporting requirements, and the constant threat of non-compliance penalties, new contractors face significant challenges that can derail their federal contracting ambitions before they even begin. The stakes couldn’t be higher. Non-compliance can result in contract termination, substantial financial penalties, and exclusion from future federal opportunities.

Exploitability as the Countdown Clock: Prioritizing Vulnerabilities Before Time Runs Out

In vulnerability management, every scan tells a story. The truth is that only some of those stories matter right now and that the challenge isn’t finding vulnerabilities. It’s knowing which ones are about to cost you. If you’re dealing with hundreds of vulnerabilities per asset, especially if you’ve adopted cloud solutions, you’re not alone. That’s become the norm. But you can’t patch everything, and you shouldn’t even try.