Your print server is the least-protected box on the network. Attackers just proved it. PaperCut NG/MF, the print management software running in the server rooms of schools, councils, and banks across Africa, is under active exploitation. Two flaws, chained together, let an unauthenticated attacker walk in through the front door and run code on the…
A max-severity GiveWP flaw turns a WordPress donation form into a remote shell If your organisation raises money through a WordPress site, there is a good chance it runs GiveWP. The plugin sits on more than 100,000 installations, which makes CVE-2026-82222, rated maximum severity, a problem for a large and badly under-defended slice of the…
Black Hat USA 2026: AI-Powered Threats and Enterprise Security Lessons Black Hat USA 2026: AI-Powered Threats and Enterprise Security Lessons AI appeared across many Black Hat and DEFCON presentations last week. Two themes dominated: AI as a security tool, and the new attack surface created by autonomous AI agents. CISOs reviewing cybersecurity strategies should consider…
Zero-Day GeoServer Vulnerability — eHawu Security Intelligence Attackers Target Zero-Day Vulnerability in GeoServer August 13, 2026 | Enterprise Security eHawu Security Intelligence: This vulnerability poses significant risk to enterprises running GeoServer. Organizations should immediately assess internet-exposed instances and restrict public access until a patch is applied. Understanding the GeoServer Zero-Day A critical zero-day vulnerability has…
SharePoint Vulnerabilities Expose African Enterprise Collaboration — CISA Warns SharePoint Vulnerabilities Expose African Enterprise Collaboration — CISA Warns CISA Adds SharePoint Vulnerabilities to Known Exploited Catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several Microsoft SharePoint vulnerabilities to its Known Exploited Vulnerabilities catalog this week, citing active exploitation in the wild. For…
Microsoft Defender Patch Bypass Exposes Enterprise Systems to System-Level Control Microsoft Defender Patch Bypass Exposes Enterprise Systems to System-Level Control eHawu Network Security Solution: Our layered defense architecture detects and blocks exploit techniques like ShieldBreak at the network layer, ensuring that even if endpoint protections are compromised, lateral movement is prevented across your enterprise network….
Microsoft Defender Patch Bypass Exposes Enterprise Systems to System-Level Control Microsoft Defender Patch Bypass Exposes Enterprise Systems to System-Level Control eHawu Network Security Solution: Our layered defense architecture detects and blocks exploit techniques like ShieldBreak at the network layer, ensuring that even if endpoint protections are compromised, lateral movement is prevented across your enterprise network….
Metabase SQLi vulnerability puts enterprise data at risk Metabase SQLi vulnerability puts enterprise data at risk Zero-day in BI platform exposes credentials and API keys A SQL injection vulnerability in Metabase, the open-source business intelligence platform, has been exploited in the wild. The flaw, rated 10/10 on the CVSS scale, allows attackers to gain raw…
Fake CCleaner Downloads: Chrome Credential Theft Threatens Enterprises Fake CCleaner Downloads: Chrome Credential Theft Threatens Enterprises The Hidden Danger in Popular PC Cleaning Utilities A convincing fake version of the widely used CCleaner utility is being used to deliver a multi-stage Windows malware that ultimately abuses Google Chrome for credential theft and surveillance. African enterprises…
Fake CCleaner Downloads: Chrome Credential Theft Threatens Enterprises Fake CCleaner Downloads: Chrome Credential Theft Threatens Enterprises The Hidden Danger in Popular PC Cleaning Utilities A convincing fake version of the widely used CCleaner utility is being used to deliver a multi-stage Windows malware that abuses Google Chrome for credential theft and surveillance. African enterprises must…