Author: Robert Timlick

Palo Alto Networks has revealed that it’s observing brute-force login attempts against PAN-OS GlobalProtect gateways, days after threat actors warned of a surge in suspicious login scanning activity targeting its appliances.
“Our teams are observing evidence of activity consistent with password-related attacks, such as brute-force login attempts, which does not indicate exploitation of a

A newly disclosed high-severity security flaw impacting OttoKit (formerly SureTriggers) has come under active exploitation within a few hours of public disclosure.
The vulnerability, tracked as CVE-2025-3102 (CVSS score: 8.1), is an authorization bypass bug that could permit an attacker to create administrator accounts under certain conditions and take control of susceptible websites.
“The

Lately, there’s been a lot of pearl-clutching among Portland’s economic leaders.

The Portland Metro Chamber’s 2025 State of the Economy report didn’t just deliver sobering data — it issued an urgent call to action. Yet instead of grappling with its core message, much of the local conversation has zeroed in on a single, loaded phrase: “doom loop.”

The hand-wringing misses the point. The report is clear: “Our region’s leaders must turn their attention to make our economy competitive…

The Class A building in the Pearl District first opened in 2009 and was last sold to NP Machineworks, LLC in 2011.

Yes, Portland and Oregon restaurants benefit from the bounty of Oregon land, but there are some ingredients that just aren’t found here or domestically.

Dr. Tom Sellers had been in the role for a little over a year.

The move hints at several pressures placed on distillers in the past few years.

The corporate owner of Hop Valley Brewing is shutting down production at its Eugene brewery and outsourcing to other Oregon facilities, according to media reports.

Cybersecurity researchers have detailed a case of an incomplete patch for a previously addressed security flaw impacting the NVIDIA Container Toolkit that, if successfully exploited, could put sensitive data at risk.
The original vulnerability CVE-2024-0132 (CVSS score: 9.0) is a Time-of-Check Time-of-Use (TOCTOU) vulnerability that could lead to a container escape attack and allow for

Threat actors are continuing to upload malicious packages to the npm registry so as to tamper with already-installed local versions of legitimate libraries to execute malicious code in what’s seen as a sneakier attempt to stage a software supply chain attack.
The newly discovered package, named pdf-to-office, masquerades as a utility for converting PDF files to Microsoft Word documents. But, in