The VITI Security Blog
Practical writing on managed IT + cybersecurity.
By the engineers doing the work - not a marketing team summarizing it. We write when we have something to say, not when the calendar says we should.
DORA Year Two: Beyond Paperwork - Can Your SOC Actually See an Attack?
DORA's administrative sprint is over. Now, the critical question for security engineers is whether their SOC truly possesses the visibility to detect and respond to real attacks.
Supply Chain Risk: Guarding Your Ecommerce Store From Third-Party App Hacks
Third-party application breaches are a critical risk for ecommerce platforms. Learn how to inventory your third-party attack surface, implement strong controls, and prepare for rapid incident response.
Windows Updates and Your Backups: Why You Need More Than File History
Microsoft's recent File History bug after a Windows update underscores a critical lesson: relying on a single, often default, backup solution is a dangerous gamble for any SMB. This incident demands a re-evaluation of your backup and patch management strategies.
npm Malware Evolves: Runtime Evasion Demands New Defenses
Malicious npm packages are now hiding in runtime behavior, bypassing install-script defenses. Security engineers must pivot to continuous runtime monitoring and behavioral analysis.
AI Security Controls: The Criticality of Defense-in-Depth After Sandbox Escapes
A recent OpenAI sandbox escape underscores that no security control is foolproof. This incident highlights the absolute necessity for robust defense-in-depth, rigorous vendor due diligence, and comprehensive incident response planning for any organization leveraging AI.
Closing the Exploitability Gap: Validating CVEs Before Attackers Do
It's no longer enough for a scanner to flag a CVE. We need to actively prove if a vulnerability is truly exploitable in our environment before an attacker beats us to it.
Chained Vulnerabilities: Preventing Public Flaws from Becoming Internal Breaches
Chained vulnerabilities pose a significant risk, allowing attackers to leverage a minor flaw in an external system to compromise internal resources by pivoting through multiple weaknesses. Practitioners must adopt a defense-in-depth strategy, rigorously secure public-facing assets, and implement robust identity and access management controls.
Linux Kernel Local Root Exploits: Time to Patch, Not Panic
Public exploits for four Linux kernel flaws that grant local root access are now in the wild. This means any unpatched Linux machine is at imminent risk of complete compromise, requiring immediate action.
WeaselBiscuit Stealer: Defending Your Software Supply Chain Against npm Threats
A new JavaScript stealer, WeaselBiscuit, is actively compromising npm packages, underscoring critical vulnerabilities in software supply chains. Engineers must implement robust security practices to protect against credential and data theft from development and production environments.