A newly disclosed AWS Kiro vulnerability shows how a hidden line of text on a webpage … Hidden Web Text Can Trigger AWS Kiro RCERead more
cloud security
AWS Warns Unmonitored Outbound Traffic Is Becoming a Major Cloud Security Risk
Cloud security teams have traditionally focused on preventing attackers from getting into their environments. Firewalls, web … AWS Warns Unmonitored Outbound Traffic Is Becoming a Major Cloud Security RiskRead more
CodeStorm Phishing Campaign Exploits Compromised Microsoft 365 Accounts
A sophisticated CodeStorm phishing attack is redefining how adversaries exploit trust in cloud ecosystems. Security researchers … CodeStorm Phishing Campaign Exploits Compromised Microsoft 365 AccountsRead more
Salesforce OAuth Attack Exploits Klue Integration to Steal CRM Data
A stealthy new Salesforce OAuth attack is exposing a critical weakness in how enterprises rely on … Salesforce OAuth Attack Exploits Klue Integration to Steal CRM DataRead more
ServiceNow Data Breach Exposes Customer Data via Misconfigured Endpoint
A newly disclosed ServiceNow data breach has raised serious concerns across the enterprise SaaS landscape, after … ServiceNow Data Breach Exposes Customer Data via Misconfigured EndpointRead more
Browser-in-the-Browser Attack Targets Microsoft 365 Logins
A sophisticated Browser-in-the-Browser phishing attack is targeting Microsoft 365 users, leveraging highly realistic fake login popups … Browser-in-the-Browser Attack Targets Microsoft 365 LoginsRead more
How This Linux Flaw Triggers Critical Container Escape
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical Linux kernel cgroups … How This Linux Flaw Triggers Critical Container EscapeRead more
Critical MCP Toolbox Flaw Exposes Enterprise Databases via DNS Rebinding
A newly disclosed MCP Toolbox vulnerability is raising serious concerns across enterprise environments, particularly those relying … Critical MCP Toolbox Flaw Exposes Enterprise Databases via DNS RebindingRead more
Tycoon 2FA Attack Silently Breaks Microsoft MFA
A highly sophisticated phishing platform known as the Tycoon 2FA phishing kit is redefining the threat … Tycoon 2FA Attack Silently Breaks Microsoft MFARead more
TamperedChef Malware Hides Stealth Attacks Inside Signed Apps
One of the most aggressive supply chain attacks in recent memory has struck the developer ecosystem. … TamperedChef Malware Hides Stealth Attacks Inside Signed AppsRead more