Qualysec Technologies News

Global cybersecurity pioneer DigiCert has been the victim of a recent cyberattack. This is a major concern in the cybersecurity industry, as attackers were able to gain access to the issuance of 60 Extended Validation (EV) Code Signing certificates in a clever social engineering scheme. The attack started on April 2 when a sophisticated threat actor reached out to DigiCert’s support system through a Salesforce-based chat system.  The threat actor appeared to be a customer, requested...

In a significant development across cybersecurity, an autonomous AI tool “Xint Code” has uncovered a critical and a hidden vulnerability within Redis which is a widely used open-source data storage system. The flaw CVE-2026-23479 went completely unnoticed for at least two years by the traditional security defences and human developers. The flaw was reported and officially patched on May 5, 2026. Initially, it was not a highly publicised bug but it’s drawing massive industry at...

Qualysec has officially achieved CREST Accreditation for its Penetration Testing services, marking a significant milestone in the company’s commitment to delivering cybersecurity services that meet globally recognised standards. The accreditation places Qualysec among a global community of cybersecurity companies independently assessed for their technical competence, governance, operational maturity, quality management, and ethical business practices. Ongoing high standards Commenting o...

The dark-web data dump has shaken up the critical infrastructure industry in India, revealing highly sensitive information about the country’s largest nuclear power plant, the Kudankulam Nuclear Power Plant (KKNPP) in Tamil Nadu. Recently, the notorious ransomware syndicate, “World Leaks”, published more than 19,000 files that were directly tied to the construction of the facility and financial risk management. Qualysec Technology has confirmed the 14.3-gigabyte cache. The ana...

Qualysec Technologies has officially announced the launch of Medysec, a dedicated website and specialist cybersecurity practice for medical-device manufacturers and HealthTech companies. Medysec emphasises connected devices, software as a medical device (SaMD) and healthcare technology. The launch represents another advancement in Qualysec’s healthcare cybersecurity efforts and brings together their expertise in penetration testing and security assessment in a new environment intended for...

CloudSEK’s latest look at the LiteLLM incident has pushed the possible scale of the breach much higher. Data reconstructed from the wider TeamPCP and Trivy campaign points to environments linked with more than 2,500 organisations, although that number does not mean 2,500 organisations were definitely compromised. The March incident involved malicious LiteLLM packages uploaded to PyPI. Researchers now say the campaign data contains about 434,000 captured files and exfiltration-related reco...