Pakistan’s Transparent Tribe Cyber Espionage Campaign Escalates in Afghanistan and India A sophisticated nation-state threat actor has been conducting a relentless cyber espionage campaign against high-value targets in Afghanistan, with some attempts also aimed at government agencies in India. The threat actor, known as Transparent Tribe (aka APT 36), is believed to be operating on … Read more
Cybersecurity Challenges Plague Law Enforcement Agencies, Leaving Them Vulnerable to Attacks Law enforcement agencies are struggling to keep pace with the rapidly evolving threat landscape of cybercrime. A recent incident in Texas highlights the risks when police departments fail to prioritize adequate cybersecurity training for their officers. Malware was discovered hidden inside body camera footage … Read more
A Critical Vulnerability in N-able’s Passportal Exposes Password Vault Master Keys A disturbing security flaw has been discovered in Passportal, a popular password manager used by thousands of managed service providers (MSPs) and small to medium-sized businesses (SMBs). The vulnerability allows any malicious website to gain complete, persistent access to customers’ vaults, putting sensitive credentials … Read more
Microsoft’s Entra ID Flaw Exposes Organizations Worldwide to Devastating Attacks A critical vulnerability in Microsoft’s Entra Identity platform has been exploited in the wild, allowing attackers to execute malicious code on affected systems. The flaw, which has been assigned a CVSS (Common Vulnerability Scoring System) rating of 10.0, is considered one of the most severe … Read more
A newly disclosed vulnerability in GitLab, a popular platform for software development and collaboration, has been actively exploited just days after its public release. The flaw, identified as CVE-2026-19478, allows attackers to gain unauthorized access to sensitive information, including user identities, by exploiting the way GitLab handles cross-domain requests. The impact of this vulnerability is … Read more
N-able’s Cloud-Based Password Manager Left Exposed by Critical Bug A serious security vulnerability in N-able’s popular password manager, Passportal, has left thousands of businesses potentially vulnerable to complete compromise of their sensitive credentials. The bug, discovered by Bay Area Labs founder James Arnott on July 8, allowed any malicious website to obtain access to customers’ … Read more
A Delta Flight’s In-Flight Wi-Fi System Hacked, Exposing Vulnerabilities in Air Travel Security In a disturbing incident that has raised concerns about the security of air travel, a passenger on a Delta Air Lines flight from Las Vegas to Atlanta successfully hacked into the plane’s in-flight Wi-Fi system. The individual, who is believed to have … Read more
Cybersecurity Experts Develop Framework to Contain Rogue AI Agents Inside Networks A recent series of high-profile breaches has highlighted the need for more robust controls over artificial intelligence (AI) agents within enterprise networks. In response, cybersecurity expert Jake Williams has released a new framework called CUSTODY, designed to prevent AI agents from escaping and causing … Read more
Government agencies with limited budgets often find themselves vulnerable to cyber attacks due to a lack of resources. A recent case highlights this issue, where a local housing authority lost nearly a million dollars without even detecting it. Attackers gained access to staff email accounts, monitored financial transactions for months, and then quietly rerouted funds … Read more
A Severe Flaw in Microsoft Entra ID Exposes Organizations to Remote Code Execution Attacks Microsoft’s Entra Identity Platform, designed to provide secure authentication and authorization for organizations, has been compromised by a critical vulnerability with a CVSS score of 10.0 – the highest possible rating. This flaw allows attackers to execute arbitrary code remotely, giving … Read more