The MFA you have isn’t the MFA you think you have
For nearly a decade, multi-factor authentication has been the control every security leader points to when asked how they’ve reduced account takeover risk. It sits…
Month: September 2026
Cloudflare plans to issue quantum-safe TLS certificates
In February, Google announced a solution: Merkle Trees. These hierarchical data structures use cryptographic hashes and other math to verify the contents of large amounts of…
Inside the IT-OT Dependency Problem – Boston Scientific’s Production Halt, Berlin’s Rhysida Leak, and the Developer Workstation as an Entry Point
On September 22, Boston Scientific published the final summary of CrowdStrike’s investigation into the August 25 cyberattack that disrupted its manufacturing, order processing, and shipping…
FDD says Chinese infrastructure footprint, cybersecurity gaps threaten NATO military mobility corridors across Europe
The Foundation for Defense of Democracies (FDD) said NATO’s ability to rapidly move forces and military equipment across Europe depends not only on roads, railways,…
Cloudflare Impact reaches $100 million in donations
This week, Cloudflare’s Impact programs will reach $100 million in donated services. It’s a significant milestone, and one that we are proud of because it…
Adversary tradecraft 101: Hunting for persistence using Elastic Security (Part 1)
Last month, we hosted a webinar, Hunting for persistence using Elastic Security, where we examined some techniques that attackers use in the wild to maintain…
TeamViewer urges users to patch severe flaws “as soon as possible”
Remote access software company TeamViewer warned customers on Tuesday to immediately patch a set of high-severity vulnerabilities affecting its client and host software. The highest-severity…
Hackers Broke Into Microsoft 365 Through Forgotten Accounts Nobody Was Watching
Hackers have breached Microsoft 365 environments by targeting accounts that were still active but unmonitored. An old password and missing sign-in protections gave intruders a…
Continuous Penetration Testing: Why Annual Pen Tests Are a Compliance Checkbox, Not a Security Strategy
An annual penetration test reliably satisfies an audit requirement but tells you comparatively little about your actual exposure for the other eleven months of the…
How Israeli Checkpoints Choke Palestinian Life in the Occupied West Bank
After October 2023, delay times at checkpoints across Nablus spiked to levels beyond anywhere else in the West Bank. Commuters in Nablus spent an average…
Critical MikroTik RouterOS Vulnerability Exposes Devices to Remote Code Execution
A critical vulnerability in MikroTik RouterOS could allow unauthenticated remote attackers to execute code on vulnerable devices or trigger a denial-of-service condition. This vulnerability, tracked…
Amazon Prime Phishing Scam Uses Fake Billing Alert to Steal Logins and Card Details
A convincing Amazon Prime phishing attack is using a fake membership payment problem to lead victims through a multi-page website designed to collect their Amazon…