News that matters, without the noise.

Snowflake ends service-account passwords. Now comes the hard part

Snowflake is ending password authentication for legacy service accounts, forcing organizations to migrate them to passwordless methods. Token

What Happens If You Touch This Cable?

NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions

Cybersecurity researchers have disclosed details of a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that’s used as a

CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published the results of two red team assessments it

CISA Vulnerability Review

Most compromises do not rely on advanced techniques or cutting-edge tools. Cyber threat actors scan the internet looking

PayRange API

View CSAF Summary Successful exploitation of this vulnerability could allow a remote, authenticated or unauthenticated attacker to disclose

Interpol Operation Jackal IV Identifies 263 Cybercrime Suspects

Interpol operation leads to 58 arrests and identifies 263 suspects across 22 countries

Iran-Linked Hackers Expand Attacks With New Backdoor and Reverse SSH Tunnels

Iran-linked hackers have expanded an espionage effort with a Windows backdoor and reverse SSH tunnelling utility. The activity

‘NovaCookies’ Kit Steals Microsoft 365 Sessions for $320 a Month

The adversary-in-the-middle (AitM) phishing service lowers the barrier to entry for actors to create attacks and steal more

Ubiquiti patches three max severity security vulnerabilities

Ubiquiti has released security patches for three new maximum-severity vulnerabilities that threat actors can exploit remotely without privileges.

Google’s Culture Shift: From People-First to Prove It

The DeFlock movement is pushing back against AI mass surveillance in the U.S.