DefendEdge Cyber Security Blog
A Tale of Two SOCs: Insights From Two Red Team Assessments
Advisory at a Glance Title A Tale of Two SOCs: Insights From Two Red Team Assessments Original Publication August 25, 2026 Executive Summary The Cybersecurity and Infrastructure Security Agency (CISA) conducted simultaneous red team assessments at two organizations and observed different defensive outcomes. In both environments, the red team achieved full domain compromise and accessed…
Four Days in the Dark: What the UK Power Plant Attack Reveals About Nation-State Cyber Threats
Iran-linked hackers shut down a UK power plant for four days. What this landmark critical infrastructure attack reveals about nation-state cyber threats.
Vulnerability Summary for the Week of August 17, 2026
High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 101gen–Automation Web Platform Notifications and OTP for WooCommerce, Advanced Country Code The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the…
Defending Against an Active Threat to Siemens S7 Series PLCs
Executive summary Note: This advisory relates to an active threat to Siemens S7 Series programmable logic controllers (PLCs). However, ongoing PLC targeting activity is broader than Siemens PLCs. All PLC owners and operators should apply relevant mitigations to reduce the risk to their devices and systems. The Siemens-specific content in this advisory should be understood…
Critical Infrastructure Under Siege: The Escalating Threat to OT Systems
In 48 hours, hackers hit 30+ Minnesota water systems. CISA issued urgent directives. The attacks on critical infrastructure are accelerating — and the OT security gap is the attacker’s advantage.
Vulnerability Summary for the Week of August 10, 2026
High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 1meril–Blog Floating Button Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions. 2026-08-13 7.1 CVE-2026-28170 4xmen–pm2panel An OS command injection vulnerability in 4xmen/pm2panel (all versions) allows an authenticated remote attacker to execute arbitrary system commands on the host. The pm2panel.js handler…
44 Zero-Days in One Week: The Exploitation Surge Overwhelming Enterprise Defenses
44 zero-day exploits hit in one week including flaws in Microsoft Defender, VMware vCenter, and SAP Commerce Cloud. Here’s what happened and how to respond.
The Data Breach Epidemic of 2026: Faster, Larger, More Devastating
865,000 VPN users exposed. Patient health records stolen. $70 million in Bitcoin gone in 41 minutes. Data breaches in 2026 are accelerating — and defenders are losing the speed race.
Hotel Wi-Fi Hijacking: Why Business Travelers Are Now Prime Targets
Russian APT Midnight Blizzard’s CaptiveCrunch campaign targets travelers worldwide by hijacking hotel Wi-Fi to deliver surveillance malware. Here’s how to protect your traveling workforce.
Vulnerability Summary for the Week of August 3, 2026
High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info @fastify/aws-lambda–@fastify/aws-lambda @fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.awsLambda.event and request.awsLambda.context, values that applications are documented to use for authorization decisions such as reading API Gateway authorizer claims. In the default configuration, the getter that populates this decoration reads the client-controlled x-apigateway-event and…