OPSWAT Blog

Cisco Catalyst switches sit at the heart of enterprise networks, where the management plane is both a high-value target and a single point of operational failure. During proactive research in the OPSWAT Critical Infrastructure Protection (CIP) Lab, OPSWAT Unit 515 identified four vulnerabilities affecting Cisco Catalyst 9300 Series switches.

Increasing file-born risk in burgeoning cloud and on-prem storage drives adoption of MetaDefender Storage Security™

Recent intelligence on APT37 emphasized the critical reality that many organizations still treat air-gapped networks as impenetrable, despite evidence to the contrary. When adversaries are denied network-based entry points, they pivot to physical vectors. In industrial, defense, and critical infrastructure environments, that vector is almost always removable media.

OPSWAT MetaDefender Email Gateway Security 6.1.0

Over the last six months, malware complexity has jumped by 127%, according to OPSWAT’s 2025 Threat Landscape Report.

Ask most security teams how they handle incoming ZIP files and you’ll hear the same answer: “We scan them.” What they mean is that their anti-malware or EDR solution reads the archive’s header, extracts the contents, and scans for known threats. The problem is that most scanning engines trust what an archive declares about itself. Attackers have known how to exploit that assumption for years.

A zero-day vulnerability is a software or hardware flaw unknown to its developer or vendor. With no patch or fix available, attackers can exploit it immediately, meaning there are zero days without prior warning or defense.

We are thrilled to unveil the latest updates to the OESIS Framework this month. Get ready to supercharge your endpoint protection solutions with expanded support for more products and some new, exciting features.

Npm package hijacking is a software supply chain attack that turns trust in a package into the attack path. Attackers do not need to modify repository code if they can control the account that publishes the package.

How the Threat Intelligence Engine Powers MetaDefender Aether for Core