Across AWS, Google Cloud, and Microsoft Azure environments in Australia and globally, 59% of IAM users maintain access keys that have never expired—credentials that have been active for more than one year. These long-lived credentials represent a silent but catastrophic vulnerability in your cloud infrastructure. This blog explores why long-lived credentials have become the primary attack vector for identity-based breaches, how red teams exploit them during penetration tests, and what you must do today to eliminate this ticking time bomb.
Critical authentication bypass vulnerabilities in Fortinet FortiGate and related products (CVE-2025-59718 and CVE-2025-59719) are now under active attack, allowing "ghost" SSO logins that completely sidestep normal controls and logs. For Australian organisations, this is more than a VPN or firewall problem – it is a board-level exposure that directly tests whether your external penetration testing, internal penetration testing, and red team assessment services are capable of simulating SSO abuse, identity takeovers, and lateral movement across hybrid networks.
A new security flaw called React2Shell (CVE-2025-55182) puts Australian businesses at extreme risk. It has a severity score of CVSS 10.0, which is the highest possible rating. This flaw lets hackers take full control of your servers without needing a password. It affects the popular tools React and Next.js.
A critical vulnerability in Adobe Commerce and Magento (CVE-2025-54236), dubbed "SessionReaper," is being ruthlessly exploited by threat actors using AI-driven tools to automate attacks at machine speed. With the Australian holiday trading season in full swing, this unauthenticated remote code execution (RCE) flaw poses an immediate existential threat to retail and B2B organizations. This alert outlines the mechanics of the attack, the role of AI in its weaponization, and the urgent defensive actions required to prevent a catastrophic data breach.
A zero-click vulnerability, CVE-2025-21042, in millions of Samsung devices is being actively exploited to install "LANDFALL," a commercial-grade spyware. This threat, now on CISA's KEV catalog , transforms an executive's personal device into a silent corporate surveillance tool, completely bypassing your MDM and EDR. For Australian organisations with BYOD policies, this is a critical, reportable data breach scenario under the NDB scheme.
Hackers can expose the vulnerabilities in your system and use them to cause financial harm. DDoS attacks are among the most deadly online attacks and can potentially damage your site forever. By utilizing our DDoS protection, you can protect your websites and web applications from DDoS attacks.
Any company in the IT industry has to look towards the future, especially in our particular industry’s case. The future of cloud managed services depends on the rapidly evolving cloud and web-based services. Companies like Google, Microsoft, and Amazon are rapidly reshaping the cloud services arena with new high-tech services for the convenience of their users. And companies like ours, Lean Security, have to evolve with them or we will perish.
Cloud computing has a lot advantages for your company. Simply put, it provides you with a better way to run your business, although it does represent a huge change for your business. In any company, there are established practices and culture. When you implement something like cloud technology, it means that you will have to make many adjustments, significant ones at that.
Some people still hesitate to use cloud-based software but it is the need of the 21st century. It has already revolutionised the way business is done. While security threat is present in any kind of software, the cloud is not devoid of it. For users, here are some tips to ensure security while using cloud computing and making your experience a smooth one.
Cloud computing has changed the way business is done and this is facilitated by different apps which are based on the concept of cloud computing. These apps and services allow better integration, file sharing, and accessibility, which are crucial to business success in this age. Which are the tops apps, which have conquered the cloud arena and facilitated business processes the most? Read to find out.
Amazon’s AWS (Amazon Web Services) is a popular cloud computing application which is used by people worldwide. It can help business owners reduce their IT costs. You no longer have to purchase expensive machinery and hire extra IT staff. You can use this cloud application to pay as you go to cut monthly costs for IT services.
Like every other popular service or software on the internet, WordPress is prone to hacker attacks. There are some vulnerabilities in WordPress itself. Other security risks are created because of user neglect and carelessness. Users create websites and blog pages using WordPress and all their information is at risk when proper care is not taken to keep the pages secure.
Following are some common security risks that users face when using WordPress, by avoiding these you can keep your websites safe:
