Microsoft to stop Exchange 2016 / 2019 security updates in October

Microsoft has announced that it will stop shipping security updates for its Exchange 2016 and 2019 email server software through the Extended Security Update (ESU) program in October. This marks the end of a nearly two-year extension period, which was initially intended to provide extra support for organizations still running these outdated versions of Exchange. … Read more

CISA orders urgent action on actively exploited Langflow RCE flaw

The US Government is Racing Against Time to Fix a Critical AI Framework Vulnerability A critical security flaw in the Langflow visual framework, used for building AI agents, has been identified as actively exploited by malicious actors. The Cybersecurity and Infrastructure Security Agency (CISA) has ordered US government agencies to prioritize patching this vulnerability, known … Read more

Why Modern SOCs Need Multi-Layered Detections

As AI-powered attacks continue to escalate, organizations are struggling to keep pace with the ever-evolving threat landscape. A growing number of security operations centers (SOCs) are turning to multi-layered detection strategies to stay ahead of the curve. But what exactly is a multi-layered detection approach, and why do modern SOCs need it? The use of … Read more

EU Financial Institutions Leak Data Through Cookie Trackers

Financial Institutions Expose Customer Data Through Cookie Trackers, Ignorant of the Risk A disturbing trend has emerged among European banks and other financial institutions, inadvertently transmitting sensitive customer information to third-party advertising platforms via cookie trackers. Researchers at Jscrambler have uncovered a pattern of data leakage through tracking pixels, often without the knowledge or consent … Read more

Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA

A sophisticated phishing kit, dubbed Kratos, has been dismantled by law enforcement authorities after being used to steal Microsoft 365 sessions and bypass multi-factor authentication (MFA) measures in place to protect users’ accounts. The operation highlights the evolving tactics employed by cybercriminals to evade detection and compromise even the most secure systems. The Kratos phishing … Read more

Why Modern SOCs Need Multi-Layered Detections

Cybersecurity teams are facing an unprecedented threat landscape, with artificial intelligence (AI) models being used to discover previously unknown software vulnerabilities at an alarming rate. Modern Security Operations Centers (SOCs) must adapt to this new reality by implementing multi-layered detection strategies to stay ahead of these emerging threats. The rise of AI-powered vulnerability discovery has … Read more

Chick-fil-A discloses data breach after credential stuffing attacks

Chick-fil-A Discloses Data Breach After Credential Stuffing Attacks Expose Customer Info Fast food giant Chick-fil-A has revealed a data breach affecting an undisclosed number of customers after their accounts were compromised in a series of credential stuffing attacks. The company, which operates over 3,000 restaurants across the US and internationally, detected suspicious login activity to … Read more