Cyber Attacks
View allHow Did Google Dismantle the 1.3 Million Device XCPE Botnet?
Cyber Attacks ·
Google and partners took down a botnet using preinstalled malware in Android TV boxes, banning the manufacturer responsible for the backdoor.
How Attackers Use Teams Calls to Steal Remote Access and Privileged Accounts
Cyber Attacks ·
Microsoft researchers detail how hackers impersonate IT staff via Teams to trick users into granting remote control, leading to deep network compromise.
Audit Multi-Factor Authentication: Scope, Evidence, and Fixes
Cyber Attacks ·
Your MFA implementation likely fails because it trusts the identity provider without verifying the context of each login request.
Cloud Security
View allCloud Security
Does Your Active Roles Version Have an RSTS Configuration Flaw?
One Identity released version 8.6 to fix a security issue in the Redistributable Secure Token Server configuration for older releases.
Cloud Security
Will GTA VI Cloud Streaming Stay Exclusive to Xbox Consoles at Launch?
Rockstar Games confirms next-gen title streams only to Xbox hardware, not PCs or web browsers, despite earlier industry reports suggesting broader access.
AI Blue Team
View all- Nov 1208:40AI Blue Team
How to monitor Google’s new Gemini Decisions API for policy enforcement
- Nov 700:06AI Blue Team
How do defenders spot autonomous AI agents planning cyberattacks?
- Nov 518:10AI Blue Team
How Do Security Teams Spot AI Agents Automating Cyberattacks?
- Nov 514:47AI Blue Team
How can veteran entrepreneurs use AI to grow their small businesses?
- Nov 407:55AI Blue Team
How potential state politics could reshape US AI data center expansion plans
- Nov 301:23AI Blue Team
Does the HP EliteBook X Flip G2i 14 AI offer enough security value for its high price tag?
- Nov 220:24AI Blue Team
Why are major retailers and banks blocking AI agents from their sites?
- Nov 213:51AI Blue Team
How do security teams monitor AI models with embedded CPUs and file systems?
Latest news
Vulnerabilities
How ManageEngine DDI Central Flaw Lets Users Run Commands on DHCP Servers
Authenticated users in older versions can bypass controls to execute PowerShell on servers using crafted DNS suffixes.
Vulnerabilities
Why does TIBCO Control Plane face high-severity auth bypass risk?
A high-severity flaw in TIBCO Platform’s Self-Hosted Control Plane allows attackers to skip login checks via an alternate path.
Vulnerabilities
Is Your ibi WebFOCUS Version Vulnerable to High-Severity CRLF Injection?
A high-severity flaw in multiple versions of ibi WebFOCUS allows improper CRLF sequence handling, exposing users to potential injection attacks.
Vulnerabilities
Can attackers run code on FortiAuthenticator without logging in?
An unauthenticated remote code execution flaw in FortiAuthenticator versions 6.6 and 8.0 allows attackers to write data out of bounds via HTTP requests.
Vulnerabilities
How to Verify Node.js November 2026 Security Updates Are Applied
Node.js released security patches in November 2026. Security teams must verify their environments have received these updates to address the disclosed vulnerabilities.
Vulnerabilities
Can Attackers Bypass GlobalProtect Auth in Palo Alto PAN-OS?
Palo Alto Networks issued an advisory for CVE-2026-0328, a low-severity flaw allowing unauthenticated VPN connections via third-party clients.
Vulnerabilities
Does Your ManageEngine ADAudit Plus Version Need Patching for SQL Flaw?
An authenticated SQL injection in custom reports affects ADAudit Plus versions below 8711, rated high severity by the National Vulnerability Database.
Vulnerabilities
Does MongoDB CSFLE Flaw CVE-2026-120813 Expose Sensitive Data to Plaintext Storage via Malicious Schemas?
A flaw in MongoDB's client-side encryption allows malicious schemas to bypass security, storing sensitive information in readable plaintext.