Threat information
Alerts, technical advisories and vulnerability notices to help you take action.
NC4 advises all organisations and individuals in Kenya running Node.js-based systems to apply security updates addressing multiple vulnerabilities, including flaws that could allow remote code execution and bypass certificate validation.
NC4 advises all organisations and individuals in Kenya running PHP-based systems to urgently address PHP2Shell, two critical vulnerabilities that could allow attackers to execute malicious code on affected servers.
Malware distributed through legitimate vehicle head-unit updates demonstrates how connected transport systems can inherit traditional software supply-chain risks.
Thousands of active AWS keys discovered in public sources demonstrate why exposed cloud credentials must immediately be treated as compromised.
A critical vulnerability affecting Elementor Pro could allow attackers to upload malicious files and take control of vulnerable WordPress websites.
Information-stealing malware can hijack browser sessions even after users have successfully completed passwords and multi-factor authentication.
Vulnerable routers and network gateways can be turned into botnet infrastructure for credential theft, covert communication and DDoS attacks.
Compromised cloud credentials can expose employee identities, privileged accounts and organisational structures that attackers can use to plan further cyberattacks.
Multiple critical vulnerabilities affecting SAP platforms require Kenyan enterprises to prioritise exposed and business-critical systems.
An actively exploited vulnerability affecting Cisco firewall and remote-access infrastructure requires immediate attention from organisations operating exposed systems.
