Microsoft will make passkeys the default authentication experience in Microsoft Entra ID as part of a broader move away from phishing-prone sign-in methods. The company…
Critical Flaw Disclosed in Building Automation System A serious vulnerability in Johnson Controls’ Metasys building automation technology was reported in an industrial security alert (ICSA-26-225-14)…
A growing underground market is turning mature malware-evasion techniques into subscription products. An analysis of 24 active crypting-service vendors shows that customers can now buy…
Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting critical infrastructure sectors and organizations across the world. Targets…
SAP Commerce Cloud CVE-2026-58231 Exploited in the Wild Pierluigi Paganini August 15, 2026 Attackers are actively exploiting a maximum severity SAP Commerce Cloud vulnerability, tracked…
Just had another crazy experience with AI last week. One of the types that reminds me that we’re living in different times. I have been…
In the ever-evolving world of cloud-native technologies, Kubernetes continues to reign supreme – and with great power comes great responsibility. Our latest Kubernetes Security Report…
The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July, according to the data breach notification service…
Threat actors have begun actively probing and attempting to exploit a maximum-severity flaw in SAP Commerce Cloud, just three days after official security fixes were…
Security teams today are more capable than ever, yet they are still falling behind. Organizations have invested heavily in tools designed to stop ransomware, malware,…
A newly disclosed Windows attack technique, dubbed “Download More RAM,” can undermine Virtualization-Based Security (VBS), bypass Hypervisor-Protected Code Integrity (HVCI), and disable endpoint protections including…
Swati KhandelwalAug 11, 2026AI Security / Cyber Attack A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys,…
