CyberNews A previously unknown threat actor has been exploiting a common security blind spot in Microsoft 365 (M365) environments to steal enterprise data from organizations in Chile. The attackers have been using a technique called TeamFiltration, an open-source toolkit that allows them to gain access to sensitive information without breaching employee accounts. According to researchers at … Read more
As organizations continue to grapple with the challenges of remote workforces, edge computing, and cybersecurity operations, a new framework has emerged as a potential solution: Secure Access Service Edge (SASE). While SASE has shown promise in addressing security concerns at the intersection of on-premises, cloud, and edge systems, adopting it comes with its own set … Read more
Summer 2026 was marked by a trio of cyber threats that sent shockwaves through the industry and left enterprise defenders scrambling to adapt. At the forefront of this new reality are autonomous agents like those unleashed by OpenAI on Hugging Face, a devastating ransomware attack on dairy company Fairlife, and Iranian-linked threat actors compromising a … Read more
A malicious variant of the remote access Trojan (RAT) called SectopRAT has been discovered hiding inside a legitimate audio application, underscoring the need for organizations to monitor the behavior of applications rather than blindly trusting them. Researchers at Fortinet found that the attackers had added the malware after the legitimate software was installed on customer … Read more
A $4 Billion AI App’s Achilles Heel: How a Simple Bug Could Have Led to Catastrophic Consequences A vulnerability in a popular artificial intelligence (AI) platform, Manus, has exposed the dark side of the rapidly growing field of agentic AI apps. A prompt-injection bug, discovered by researchers at Salt Labs, could have allowed attackers to … Read more
Ghost Service Accounts Enable M365 Data Theft in Chile In a stark reminder that even the most robust security measures can be undermined by human error, hackers have been exploiting forgotten and lost machine accounts in Microsoft 365 (M365) to steal sensitive data from organizations in Chile. This brazen tactic has left many wondering how … Read more
As organizations increasingly rely on cloud-based services, remote workforces, and edge computing, they’re facing unprecedented security challenges. One solution that’s gaining traction is Secure Access Service Edge (SASE), a framework that consolidates network and security functions into a single cloud-based platform. However, adopting SASE requires a fundamental rethink of security governance and comes with its … Read more
A Summer of Cyber Chaos: 3 Threats That Left Their Mark Summer 2026 will be remembered as one of the most tumultuous periods in recent cybersecurity history. A wave of attacks and breaches left enterprises reeling, forcing them to rethink their strategies and priorities. Three incidents stood out from the rest: a high-profile breach involving … Read more
Cybersecurity experts are sounding the alarm about a new variant of the remote access Trojan (RAT) known as SectopRAT, which has been discovered hiding inside a legitimate software application. The malware, also referred to as ArechClient2, combines extensive information-stealing capabilities with remote-control functions, making it a highly pernicious threat. Researchers at Fortinet have analyzed the … Read more
Salesforce Agents Exposed: “Salesbleed” Vulnerabilities Enable Phishing Attacks from Within Trusted Channels A critical vulnerability in Salesforce Agentforce has been discovered, allowing attackers to phish employees from within trusted company channels. Dubbed “Salesbleed,” this exploit leverages weaknesses in Web-to-lead forms and AI-powered agents to smuggle arbitrary instructions across multiple apps into internal communications channels. The … Read more