A newly identified Microsoft OAuth phishing campaign is changing the rules of phishing by eliminating one … Microsoft OAuth Phishing Campaign Uses Real Login Pages to Hijack AccountsRead more
Enterprise Security
Check Point Authentication Flaw Gives Attackers Admin Access
A critical Check Point authentication vulnerability is putting exposed management systems at immediate risk of full … Check Point Authentication Flaw Gives Attackers Admin AccessRead more
Zimbra Fixes Critical SNMP Command Injection Flaw That Could Lead to Full Server Compromise
Zimbra has released a critical security update addressing a serious vulnerability in Zimbra Collaboration Suite (ZCS) … Zimbra Fixes Critical SNMP Command Injection Flaw That Could Lead to Full Server CompromiseRead more
Abbott Investigates Cyber Incident in Cancer Diagnostics Unit
Abbott has confirmed an Abbott cyber incident involving unauthorized access to internal systems within its Cancer … Abbott Investigates Cyber Incident in Cancer Diagnostics UnitRead more
Resume-Themed LNK Files Deploy Xctdoor in Stealthy Windows Attack
A newly documented malware campaign is turning a familiar business workflow into an intrusion path: job … Resume-Themed LNK Files Deploy Xctdoor in Stealthy Windows AttackRead more
ServiceNow Data Breach Exposes Customer Data via Misconfigured Endpoint
A newly disclosed ServiceNow data breach has raised serious concerns across the enterprise SaaS landscape, after … ServiceNow Data Breach Exposes Customer Data via Misconfigured EndpointRead more
Critical Veeam Vulnerability Enables RCE on Backup Servers
A critical Veeam RCE vulnerability has been disclosed, exposing enterprise backup infrastructure to potential compromise. The … Critical Veeam Vulnerability Enables RCE on Backup ServersRead more
Microsoft Fixes 198 Vulnerabilities Including 3 Zero-Days
Microsoft has released its June 2026 Patch Tuesday update, addressing a massive 198 vulnerabilities across the … Microsoft Fixes 198 Vulnerabilities Including 3 Zero-DaysRead more
Critical MCP Toolbox Flaw Exposes Enterprise Databases via DNS Rebinding
A newly disclosed MCP Toolbox vulnerability is raising serious concerns across enterprise environments, particularly those relying … Critical MCP Toolbox Flaw Exposes Enterprise Databases via DNS RebindingRead more
Phishing Campaign Uses Fake Invites to Steal Credentials
A large-scale fake invitation phishing attack is actively targeting organizations across the United States, using convincingly … Phishing Campaign Uses Fake Invites to Steal CredentialsRead more