As cyberattacks grow in frequency, sophistication, and impact, Microsoft is doubling down on its commitment to protect...
Cloud Security
The Wiz Research team has revealed details of a May 2025 phishing campaign that weaponized Amazon Simple...
Resecurity’s HUNTER Team uncovered a severe misconfiguration: sensitive Azure Active Directory (Azure AD) application credentials exposed in...
Microsoft Threat Intelligence has published new research into Storm-0501, a financially motivated threat actor that has dramatically...
Cybersecurity researchers from CYBERNEWS recently published a report disclosing a serious security issue uncovered in Tencent Cloud,...
Red Canary has revealed a sophisticated attack campaign targeting cloud-based Linux systems through a critical remote code...
Proofpoint has revealed a persistent wave of adversary-in-the-middle (AiTM) phishing campaigns that exploit Microsoft OAuth applications to...
Wiz Research has uncovered a persistent and evolving cryptojacking operation known as “Soco404,” a campaign that exploits...
A newly disclosed critical vulnerability in Manager.io, a free accounting software used by businesses across Australia and...
Researchers from Unit 42 at Palo Alto Networks have uncovered a novel backdoor—HazyBeacon—used by a threat cluster...
The eCrime group known as SCATTERED SPIDER has recently extended its focus beyond insurance and retail to...
A security vulnerability in Synology’s Active Backup for Microsoft 365 (ABM) software has exposed countless organizations’ cloud...
The Trellix Advanced Research Center has unveiled a covert and highly sophisticated APT malware campaign dubbed OneClik,...
Mandiant successfully breached a fully patched instance of the Aviatrix Controller—a central component in Software-Defined Networking (SDN)...
In the complex world of cloud-native applications, Kubernetes and Amazon Elastic Kubernetes Service (EKS) have become the...
Trend Micro researchers have uncovered a stealthy new attack method that fuses misconfigured Docker remote APIs with...
The Apache CloudStack project has released new Long-Term Support (LTS) versions—4.19.3.0 and 4.20.1.0—to address five security vulnerabilities,...
Elastic has disclosed a high-severity vulnerability (CVE-2024-43706) affecting its Kibana observability platform, specifically in the Synthetic Monitoring...
Security research partner AppOmni disclosed five critical vulnerabilities in Salesforce’s powerful OmniStudio platform that could expose encrypted...
Cisco has issued security advisories for two high-severity vulnerabilities—one in the Cisco Integrated Management Controller (IMC) and...