0 Threats & Trends - kevwells.com

Threats & Trends

Practical threat intel for Linux/AWS: what’s new, why it matters, what to change.

Threat Radar

by

TL;DR Patch now: Linux kernel (CVE-2025-38236), OpenSSH client bugs (CVE-2025-26465/26466), and current VMware advisories; N-able N-central flaws added to CISA KEV. Watchlist: further kernel backports landing in distro trackers; VMware rollups; Microsoft August patches with multiple critical items. Action for Linux/Cloud ops: roll kernel updates with reboots, update OpenSSH clients fleet-wide (laptops, jump hosts, CI), … Read more

AI in Cybersecurity: Hype vs Reality

by

AI is beginning to make itself felt in security marketing. Vendors promise self-defending networks and fully automated SOCs. However, the reality is more nuanced. The Hype “AI replaces analysts.” “AI tools detect 100% of threats.” “AI is plug-and-play.” These claims attract attention – but they’re misleading. The Reality AI tools are only as good as … Read more

From Patching to Proactive: Why System Hardening Matters More Than Ever

by

For many IT teams, “security” still means keeping up with patches. While patching is essential, it’s far from enough. Attackers increasingly exploit default settings and weak configurations rather than waiting for an unpatched CVE. What Hardening Really Means System hardening is about stripping away unnecessary risk: Secure SSH and key management. Enforcing password and account … Read more

Cloud Misconfiguration: Still the #1 Security Threat

by

  Despite billions invested in security tools, the leading cause of cloud breaches is still misconfiguration. It’s rarely a zero-day exploit – it’s someone leaving an S3 bucket open, mis-scoping IAM permissions, or forgetting to disable test environments. The Most Common Mistakes Publicly accessible storage buckets. “Allow all” firewall and security group rules. Over-privileged IAM … Read more

The Rise of Ransomware-as-a-Service: Why Even SMEs Are Now Targets

by

Ransomware has evolved from one-off attacks into a full-blown industry. The latest model, Ransomware-as-a-Service (RaaS), allows criminals to rent out ready-made ransomware kits, complete with payment portals and “customer support.” This industrialisation of cybercrime has lowered the barrier to entry – meaning even attackers with little skill can launch devastating campaigns. Why SMEs Are Now … Read more