Grivyonx Intelligence Hub
Cloud, SaaS and infrastructure security incidents, misconfigurations and hardening guidance.
The Russia-aligned threat actor UAC-0099 has been observed using a previously undocumented .NET infostealer and remote access trojan named ASHVEIN to compromise Ukrainian government personnel. This article breaks down the malware’s capabilities, infection chain, and what organizations can do to mitigate the risk.
By Gourav Rajput
The U.S. Department of Justice has charged Zohar Pinhasi, owner of MonsterCloud, with wire fraud for allegedly defrauding ransomware victims by secretly paying ransoms while billing over $19 million for non-existent proprietary tools. This case underscores the growing risks in the cybersecurity space. As ransomware attacks surge, victims often turn to recovery services promising quick fixes. However, this alleged scheme reveals a dark side where trust is exploited for profit, prompting calls for greater transparency and AI-driven solutions.
By Gourav Rajput
Researchers uncover the MALFEX campaign—a series of malicious npm packages downloaded over 40,000 times that deliver information stealers and remote access trojans to compromised systems.
By Gourav Rajput
The FBI and Secret Service have issued a warning that the FortiBleed campaign remains active, targeting Fortinet devices with stolen credentials. This attack leverages legacy SHA-256 storage and reused login details to compromise FortiGate firewalls and SSL VPN gateways across the internet.
By Gourav Rajput
Enterprises are seeing a rapid growth in credential usage across humans, systems, and AI, outpacing the ability of security teams to monitor them. GitGuardian addresses this by offering a three‑step framework—Detect, Remediate, Prevent—to secure the expanding credential layer.
By Gourav Rajput
Dell has patched critical security flaws in its Container Storage Modules that could let attackers gain unauthenticated administrative access and full root privileges on Kubernetes nodes. The most severe vulnerability carries a perfect CVSS score of 10.0, posing an immediate risk to containerized environments worldwide.
By Gourav Rajput
CISA has added a critical FortiMail vulnerability (CVE-2026-104286) to its Known Exploited Vulnerabilities list after confirming active exploitation. This flaw enables unauthenticated attackers to write arbitrary files to systems, posing severe risks to organizations relying on FortiMail email filtering solutions.
By Gourav Rajput
Cybersecurity experts reveal how the SC WordPress backdoor maintains persistent access through a self-repairing architecture that recovers from cleanup attempts using files, database entries, and shared memory systems.
By Gourav Rajput
LevelBlue THOR team has identified a critical post-exploitation technique targeting Citrix NetScaler infrastructure. Threat actors leverage a pre-authentication command injection flaw to establish remote access, drop malicious web shells, and attempt theft of sensitive configuration data across enterprise networks.
By Gourav Rajput
New zero-day vulnerabilities in Citrix NetScaler ADC and Gateway appliances enable remote code execution and are actively exploited in production environments. With no official patches available from Citrix, many organizations are proactively isolating affected systems.
By Gourav Rajput
A high-severity cross-site request forgery vulnerability in the Elementor Website Builder plugin allows unauthenticated attackers to create rogue administrator accounts when a site admin clicks a crafted link. With a CVSS score of 8.8, this flaw poses immediate risk to millions of WordPress sites. Grivyonx Cloud analyzes the attack vector and provides actionable mitigation strategies.
By Gourav Rajput
Kiteworks has activated a company-wide safety protocol by advising all customers to power down their systems for nine hours. This precautionary measure follows receipt of credible threat intelligence regarding an imminent cyberattack targeting the organization's infrastructure.
By Gourav Rajput
Human resources departments face evolving threats from sophisticated job applicant fraud. While staff training helps identify warning signs, automated systems provide stronger defense against credential scams and identity theft in the hiring process.
By Gourav Rajput
Cloudflare recently addressed a security gap in its container platform that inadvertently allowed a client to read residual disk information left by other customers on the same physical server. The issue, which did not affect active workloads, was reported by independent researchers and has since been mitigated through an urgent patch. This incident underscores the subtle risks embedded in shared cloud infrastructures and highlights the need for rigorous isolation and continuous monitoring.
By Gourav Rajput
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added critical vulnerabilities in WSO2 and Adobe Commerce/Magento to its Known Exploited Vulnerabilities (KEV) catalog. These high-severity flaws have been confirmed to be actively exploited in real-world attacks, posing significant risks to organizations relying on these enterprise platforms.
By Gourav Rajput
A practical roadmap for implementing SASE frameworks in modern enterprises. Discover key steps to secure edge computing, integrate cloud services, and establish zero-trust principles effectively.
By Gourav Rajput
Proofpoint reports the UNK_CondorFiltration campaign compromised seven Microsoft 365 accounts using default passwords. Originating from 1,487 AWS EC2 sources, the threat focused on Chilean retail and financial institutions across 28 tenants.
By Gourav Rajput
Identity visibility has become the cornerstone of contemporary security strategies. As stolen credentials continue to dominate breach reports, organizations must gain clear insight into who is accessing what across sprawling cloud environments. This article unpacks the concept of identity visibility, explains why cloud and multicloud setups make it more challenging, and outlines the critical capabilities needed to stay ahead of attackers.
By Gourav Rajput
