OPSWAT Blog

Cisco Catalyst switches sit at the heart of enterprise networks, where the management plane is both a high-value target and a single point of operational failure. During proactive research in the OPSWAT Critical Infrastructure Protection (CIP) Lab, OPSWAT Unit 515 identified four vulnerabilities affecting Cisco Catalyst 9300 Series switches.

Increasing file-born risk in burgeoning cloud and on-prem storage drives adoption of MetaDefender Storage Security™

Browser extensions often seem harmless to most users, leading to their installation with little to no doubt about their security. This is especially true for those featured and verified by the browser itself, such as Google Chrome. Once installed, such extensions may gain permission to read almost everything a user sees, including email, session data, passwords, keystrokes, and internal tools, which attackers typically aim to exploit. 

OPSWAT MetaDefender Email Gateway Security 6.1.0

Over the last six months, malware complexity has jumped by 127%, according to OPSWAT’s 2025 Threat Landscape Report.

Ask most security teams how they handle incoming ZIP files and you’ll hear the same answer: “We scan them.” What they mean is that their anti-malware or EDR solution reads the archive’s header, extracts the contents, and scans for known threats. The problem is that most scanning engines trust what an archive declares about itself. Attackers have known how to exploit that assumption for years.

A zero-day vulnerability is a software or hardware flaw unknown to its developer or vendor. With no patch or fix available, attackers can exploit it immediately, meaning there are zero days without prior warning or defense.

We are thrilled to unveil the latest updates to the OESIS Framework this month. Get ready to supercharge your endpoint protection solutions with expanded support for more products and some new, exciting features.

The European Union has significantly elevated its cybersecurity posture with the adoption of Regulation (EU) 2024/2847, also known as the CRA (Cyber Resilience Act). As the first horizontal cybersecurity regulation for PDEs (products with digital elements), the CRA establishes legally binding security requirements for both hardware and software placed on the EU market.

How the Threat Intelligence Engine Powers MetaDefender Aether for Core