A newly uncovered cyber espionage campaign is targeting cloud environments across the Middle East, with attackers … Iran-Linked Hackers Target Microsoft 365 Tenants in Password Spray CampaignRead more
cloud security
Google Drive Introduces AI-Powered Ransomware Detection and File Restoration
Google has officially moved its ransomware detection and file restoration capabilities for Google Drive into General … Google Drive Introduces AI-Powered Ransomware Detection and File RestorationRead more
Trivy Supply Chain Attack Enables CI/CD Credential Theft
Supply chain attacks targeting developer tools are becoming one of the most dangerous threats in modern … Trivy Supply Chain Attack Enables CI/CD Credential TheftRead more
ARPA TLD Phishing: How IPv6 Tunnels Evade Enterprise Defenses
Phishing has evolved beyond look‑alike domains and typo‑squats. Recent research exposes ARPA TLD phishing, where threat … ARPA TLD Phishing: How IPv6 Tunnels Evade Enterprise DefensesRead more
87% of Organizations Exposed: Known Exploited Vulnerabilities in Active Software
Datadog’s State of DevSecOps 2026 report delivers one of the clearest warnings yet: 87% of organizations … 87% of Organizations Exposed: Known Exploited Vulnerabilities in Active SoftwareRead more
RustFS Console XSS Flaw Exposes Admin S3 Credentials in Critical Attack
A newly disclosed vulnerability in the RustFS Console has been classified as a critical stored XSS … RustFS Console XSS Flaw Exposes Admin S3 Credentials in Critical AttackRead more
Steaelite RAT and the Rise of Double-Extortion Cyberattacks Against Enterprises
In late 2025 and early 2026, security researchers began observing a surge in double‑extortion ransomware attacks … Steaelite RAT and the Rise of Double-Extortion Cyberattacks Against EnterprisesRead more
Claude Code Remote Control: Security & Risk Guide
Remote development is no longer a luxury — it’s an operational necessity. As hybrid work models … Claude Code Remote Control: Security & Risk GuideRead more
OAuth Attacks in Entra ID Can Leverage ChatGPT to Compromise Email
Threat actors are constantly adapting, and one increasingly abused technique inside Microsoft Entra ID is OAuth … OAuth Attacks in Entra ID Can Leverage ChatGPT to Compromise EmailRead more
VMware Aria Vulnerabilities Expose Remote Code Execution Risks
On February 24, 2026, Broadcom released security advisory VMSA-2026-0001, detailing critical vulnerabilities in VMware Aria Operations … VMware Aria Vulnerabilities Expose Remote Code Execution RisksRead more