The Zero Noise Approach: Combating Cloud Alert Fatigue
The vast majority of companies relying on cloud infrastructure are at least partially using environments hosted by one of the big three Cloud Service Providers.…
Month: August 2026
Max severity SAP Commerce Cloud flaw now targeted in attacks
A maximum-severity SAP Commerce Cloud remote code execution vulnerability patched three days ago is already being targeted in attacks, according to threat intelligence company Defused.…
Shell Investigating Data Breach Following Cl0p Ransomware Group Claim
Multinational energy giant Shell has launched an active investigation after the notorious Cl0p ransomware syndicate claimed responsibility for exfiltrating sensitive internal data. Security researchers and…
Microsoft Makes Passkeys Default in Entra ID, Retires SMS and Voice Authentication
Microsoft will make passkeys the default authentication experience in Entra ID beginning September 1, 2026, and will fully retire its native SMS and voice multifactor…
17 draft Cyber Resilience Act standards are open for comment
A company selling a connected toy in Europe must show by the end of 2027 that the product meets the Cyber Resilience Act. The law…
Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers
Swati KhandelwalAug 11, 2026Insider Threat / Cyber Espionage Security researchers invented a cryptocurrency startup, advertised developer jobs, and hired three people they believe were North…
14,000 Trezor Customers Impacted by Data Breach at ShipMonk
Hardware crypto wallet provider Trezor says the personal information of nearly 14,000 people was compromised in a data breach. The incident, it says, did not…
macOS Screen Sharing Flaw Exploited to Deploy Monero Miners
macOS Screen Sharing Flaw Exploited to Deploy Monero Miners Pierluigi Paganini August 15, 2026 Hackers are exploiting a macOS Screen Sharing flaw to gain root…
It took $58 to break Microsoft’s SCCM, but a patch made it harder
The revealed attack chain combines four weaknesses, including a broken authorization in the AdminService upload functionality, a path-traversal flaw dubbed “CabSlip,” weak code-signing validation that…
Key Performance Indicators for Effective DSPM
Today’s organizations face the challenge of securing vast amounts of sensitive data scattered across increasingly complex and distributed environments. Traditional approaches to data security often…
The Modern Attack Chain: Rethinking Google Workspace Security in the Age of AI
By Rajan Kapoor, VP Security, Material Security Over the past two months, I’ve written about the Vercel breach and the Composio breach separately. Both offer…
Citrix NetScaler Heap Overflow Flaw Lets Remote Attackers Execute Code as Root
A working proof-of-concept (PoC) exploit demonstrating how a pre-authentication heap overflow in Citrix NetScaler ADC and NetScaler Gateway can be turned into unauthenticated root-level remote…