Wiz ProdSec Team’s Cloud Security Playbook
Inside the ProdSec Playbook: Operationalizing Wiz for End-to-End Cloud Security Modern Product Security teams face a unique challenge: how do you secure rapidly evolving cloud…
Month: July 2026
Conditional Access Misconfigurations Exposed 55 Orgs with MFA On
In March 2026, our SOC caught a surge of anomalous Microsoft 365 logins across dozens of organizations simultaneously. The source: a handful of IP addresses…
Injective SDK on npm infected with cryptocurrency wallet stealer
Hackers compromised the Injective Labs SDK project’s GitHub repository and used it to publish a malicious package on the Node Package Manager (npm) that stole…
GodDamn Ransomware Rebrands From Beast and Uses PoisonX Driver to Disable Defenses
GodDamn ransomware has emerged as a serious threat, marking the third rebrand of a family that has quietly evolved since 2022. What makes this variant…
Attackers Exploit WordPress Plugin Vulnerabilities for Remote Code Execution and Webshell Access
A large-scale exploitation campaign is actively weaponising known vulnerabilities across multiple content management systems, with WordPress plugins forming the primary attack surface. Cyber actors are…
AI Gateway Connected to Amazon Bedrock Hijacked for Cryptomining
An Amazon EC2 instance running LiteLLM and connected to Amazon Bedrock was compromised and used for cryptomining, according to new research from Darktrace. In this…
Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656)
Microsoft has finally released a security update for its Microsoft Malware Protection Engine, which fixes CVE-2026-50656, the Windows Defender local privilege escalation vulnerability triggered by…
6.9 million driver’s license numbers stolen from AssuranceAmerica
Insurance provider AssuranceAmerica has confirmed a data breach affecting the personal information and driver’s license numbers of up to 6.9 million people. AssuranceAmerica provides car…
Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs
Ravie LakshmananJul 09, 2026Developer Security / Supply Chain Security Datadog Security Labs is warning of “several overlapping campaigns” that are systematically enumerating corporate GitHub organizations,…
UK Court of Appeal gives Microsoft complaint the green light
The ValueLicensing complaint against Microsoft is being upheld following a Court of Appeal ruling. The Court of Appeal unanimously upheld the Competition Appeal Tribunal’s (CAT)…
Telstra shifts 25,000 users to Atlassian Cloud in four months
Telstra has farewelled its self-hosted on-premises instances of Jira and Confluence in favour of Atlassian’s managed cloud environment. Kim Krogh Andersen, Telstra Supplied Around 25,000…
QIZ Security Raises $17 Million for Cryptographic Governance Platform
Israeli startup QIZ Security announced on Thursday that it has raised $17 million in seed funding for its cryptographic posture and post-quantum cryptography (PQC) management…