Webinar: How malicious OAuth apps can lead to Google Workspace breaches

Google Workspace Breaches Made Easy: Malicious OAuth Apps Exploit User Trust A growing concern in cybersecurity is the ease with which attackers can breach sensitive data, even without exploiting software vulnerabilities or stealing passwords. Google Workspace, a suite of productivity and collaboration tools, has become a prime target for malicious actors who use social engineering … Read more

Why Patch Automation Needs Brakes, Not Just an Accelerator

Cybersecurity teams are racing against time to keep up with the ever-increasing pace of software updates and patches. The frequency and volume of releases have become overwhelming, leaving organizations struggling to prioritize and deploy fixes before vulnerabilities are exploited. However, simply accelerating patch automation is not enough; what’s needed is a more nuanced approach that … Read more

AI Changed the Exposure Problem. Validation Needs to Change With It.

Artificial intelligence has fundamentally altered the way attackers exploit identity exposure, transforming it into a potent attack vector that can bypass traditional security measures. The consequence is a new breed of sophisticated attacks that can jump between domains and systems with ease, leaving defenders scrambling to keep up. At its core, identity exposure refers to … Read more

⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits

A wave of sophisticated cyberattacks has been unfolding, with a common thread that could be the key to unlocking the breach. Rogue AI agents, WeChat worms, PaperCut attacks, and rootkits have all made headlines in recent weeks, but beneath these distinct stories lies a more insidious force at play: identity exposure. The concept of “cross-domain … Read more

Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution

A Critical Tencent Software Flaw Has Been Exploited by Chinese Hackers for System-Level Code Execution A devastating vulnerability in Sogou Input Method, a popular Chinese-language input method editor (IME) developed by Tencent, has been used by a Chinese threat actor to deploy a powerful backdoor. The flaw, tracked as CVE-2026-51990, was exploited through a one-click … Read more

Microsoft: September updates break audio on some Windows PCs

A Critical Update to Windows 11 Has Broken Audio on Some Computers, Microsoft Admits In a sudden and unexpected twist, Microsoft has acknowledged that its recent security updates for Windows 11 have caused serious audio problems on some computers. Specifically, USB audio devices connected to certain Windows systems have stopped working or producing any sound … Read more

Revolut discloses data breach exposing financial info, passports

Revolut Discloses Data Breach Exposing Financial Info and Passports for Thousands of Customers Financial technology company Revolut has revealed that it has been targeted by a sophisticated cyber attack, resulting in the unauthorized disclosure of sensitive customer data. The company, which operates in over 160 countries and serves more than 80 million customers worldwide, including … Read more

Microsoft: September updates cause RDS failures on Windows Server

Microsoft’s Latest Patch Tuesday Updates Cause Remote Desktop Service Failures on Windows Server Systems In a surprise move, Microsoft has confirmed that its September 2026 security updates are causing widespread failures of Remote Desktop Services (RDS) on Windows Server systems. The issue affects multiple versions of Windows Server, including Windows Server 2012 and later, as … Read more

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

A malicious browser extension on Twitch has compromised nearly 31,000 users’ sensitive information, leaving them vulnerable to potential attacks. The extension, which was masquerading as a legitimate tool for streamers, had been secretly collecting OAuth tokens from affected users, allowing its creators to access their sensitive data and potentially take control of their accounts. The … Read more