July 17, 2025; CVSS 10.0 Entra ID bug via legacy Graph enabled cross-tenant impersonation risking tenant compromise.

Encrypting sensitive information before uploading it to the cloud is one of the best methods to protect your data. By using ...

"Each published package becomes a new distribution vector: as soon as someone installs it, the worm executes, replicates, and pushes itself further into the ecosystem. Once a single environment is ...

In a supply chain attack, the trending npm package, @ctrl/tinycolor, was in the target. Dastardly versions steal secrets through TruffleHog scanning.

AI-powered browsers require a whole new approach to security, so 1Password and Perplexity have teamed up to incorporate ...

The ShadowV2 DDoS operation, discovered by Darktrace, uses a command-and-control framework hosted on GitHub CodeSpaces, a ...

Spiders don't change their stripes. Despite gang members' recent retirement claims, Scattered Spider hasn't exited the ...

A North Korea-backed hacking group called Kimsuky used ChatGPT to build a fake South Korean military ID and launched a ...

An age verification provider working with several porn sites in France was found to provide information to Amazon in order to ...

With an ID from Microsoft and a records in Workday, AI agents will be able to securely interoperate with each other and with their human coworkers.