News that matters, without the noise.

Hackers Impersonate ReliaQuest Security Staff to Steal SSO Credentials and MFA Access

ReliaQuest has disclosed a social engineering attack in which threat actors impersonated members of its security team to

768 Leaked Corporate AWS Keys Remain Active With Full Administrator Access

A new cloud security investigation from Truffle Security has found that 768 publicly exposed AWS credentials still provide

Kimsuky Uses AI-Generated Chrome Extension to Automatically Steal Gmail Data

Kimsuky has been linked to a new espionage campaign that turns a Chrome extension into a quiet Gmail

Hired for One Job, Judged on Another: The CISO’s Real Problem

The skills that get a CISO hired are rarely the skills they are judged on later. Most security

Microsoft Teams now lets admins block external bots from meetings

Microsoft is rolling out a new Teams meeting protection policy that allows administrators to automatically block all identified

South Korean startup platform breach exposes key management failures

A breach at South Korea’s government-backed startup platform exposed encrypted personal data after an encryption key was included

A humanoid robot takes a high kick to the head and keeps on fighting.

RHSA-2026:58902: Important: python3.12 security update

An update for python3.12 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has

CVE-2026-78317

High Severity Description SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. Read more at

CVE-2026-78316

High Severity Description SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. Read more at

CVE-2026-78315

High Severity Description SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. Read more at

Doubloon Dredger Abuses Notion to Harvest Authentication Tokens

Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens