Cyber Security

A Critical Oversight in Multi-Factor Authentication (MFA) Rollouts: PowerShell, Graph, and Entra Scripts Exposed Multi-factor authentication (MFA) is a crucial security control that adds an extra layer of protection to user logins. However, a recent discovery has highlighted a significant oversight in the MFA rollout process for many organizations, leaving them vulnerable to potential security … Read more

As lawmakers continue to scrutinize the use of hacking tools by the US government, two members of Congress are calling for a thorough investigation into how these powers are being used. Sen. Ron Wyden and Rep. Greg Casar have written to the Government Accountability Office (GAO) requesting a review of the federal government’s hacking activities, … Read more

Financial Giant Apollo Discloses Data Breach in Ongoing Wave of Social Engineering Attacks Apollo Global Management, one of the world’s largest private equity firms, has confirmed that it was hit by a data breach earlier this summer. The breach is part of an ongoing wave of social engineering attacks targeting the financial sector, which have … Read more

US Cybersecurity Agency Warns of Critical TrueConf Server Flaws Under Active Attack A serious vulnerability in popular video conferencing platform TrueConf has been exploited by hackers, prompting the US cybersecurity agency CISA to urge federal agencies to patch the issue immediately. The warning highlights the urgent need for organizations to address this critical flaw before … Read more

Microsoft has rolled out a batch of 22 critical security updates to address severe vulnerabilities in its products, including one that’s already being exploited by attackers. The tech giant has patched the issue internally, but hasn’t disclosed any information about the attacks involving this flaw. The most pressing concern is a zero-day vulnerability tracked as … Read more

Federal Government’s Secret Hacking Practices Under Scrutiny as Lawmakers Demand Transparency A growing concern over the US government’s use of hacking and spyware to surveil American citizens has led a pair of lawmakers to request an investigation into the matter. Sen. Ron Wyden (D-Ore.) and Rep. Greg Casar (D-Texas) have written to the Government Accountability … Read more

Apollo Global Management has revealed it was hit by a data breach as part of a wave of social engineering attacks targeting the financial sector. The private equity firm, which manages over $1 trillion in assets, confirmed that attackers accessed its cloud platforms between July 6 and July 10, compromising sensitive personal data. The attack … Read more

US Cybersecurity Agency Warns of Active Attacks on TrueConf Video Conferencing Platform The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning to federal agencies, urging them to immediately patch two critical vulnerabilities in the popular video conferencing platform, TrueConf. The agency has added these vulnerabilities to its Known Exploited Vulnerabilities (KEV) … Read more

Microsoft has just rolled out a batch of 22 critical security updates to patch severe vulnerabilities in multiple products. Among these patches is one that addresses a zero-day exploit in its Entra ID service, which was being actively targeted by attackers. The exploited vulnerability, tracked as CVE-2026-69836, had the potential for remote code execution (RCE), … Read more

Cybersecurity Compliance Confidence Soars Among Defense Contractors, but Can They Back It Up? The defense industry is breathing a collective sigh of relief as contractors express increased confidence in their cybersecurity compliance. However, a closer look at two recent surveys reveals a concerning disconnect between confidence and actual readiness. According to a survey by Kiteworks, … Read more