A Critical Vulnerability in N-able’s Passportal Exposes Password Vault Master Keys A disturbing security flaw has been discovered in Passportal, a popular password manager used by thousands of managed service providers (MSPs) and small to medium-sized businesses (SMBs). The vulnerability allows any malicious website to gain complete, persistent access to customers’ vaults, putting sensitive credentials … Read more
Microsoft’s Entra ID Flaw Exposes Organizations Worldwide to Devastating Attacks A critical vulnerability in Microsoft’s Entra Identity platform has been exploited in the wild, allowing attackers to execute malicious code on affected systems. The flaw, which has been assigned a CVSS (Common Vulnerability Scoring System) rating of 10.0, is considered one of the most severe … Read more
A newly disclosed vulnerability in GitLab, a popular platform for software development and collaboration, has been actively exploited just days after its public release. The flaw, identified as CVE-2026-19478, allows attackers to gain unauthorized access to sensitive information, including user identities, by exploiting the way GitLab handles cross-domain requests. The impact of this vulnerability is … Read more
N-able’s Cloud-Based Password Manager Left Exposed by Critical Bug A serious security vulnerability in N-able’s popular password manager, Passportal, has left thousands of businesses potentially vulnerable to complete compromise of their sensitive credentials. The bug, discovered by Bay Area Labs founder James Arnott on July 8, allowed any malicious website to obtain access to customers’ … Read more
A Delta Flight’s In-Flight Wi-Fi System Hacked, Exposing Vulnerabilities in Air Travel Security In a disturbing incident that has raised concerns about the security of air travel, a passenger on a Delta Air Lines flight from Las Vegas to Atlanta successfully hacked into the plane’s in-flight Wi-Fi system. The individual, who is believed to have … Read more
Cybersecurity Experts Develop Framework to Contain Rogue AI Agents Inside Networks A recent series of high-profile breaches has highlighted the need for more robust controls over artificial intelligence (AI) agents within enterprise networks. In response, cybersecurity expert Jake Williams has released a new framework called CUSTODY, designed to prevent AI agents from escaping and causing … Read more
Government agencies with limited budgets often find themselves vulnerable to cyber attacks due to a lack of resources. A recent case highlights this issue, where a local housing authority lost nearly a million dollars without even detecting it. Attackers gained access to staff email accounts, monitored financial transactions for months, and then quietly rerouted funds … Read more
A Severe Flaw in Microsoft Entra ID Exposes Organizations to Remote Code Execution Attacks Microsoft’s Entra Identity Platform, designed to provide secure authentication and authorization for organizations, has been compromised by a critical vulnerability with a CVSS score of 10.0 – the highest possible rating. This flaw allows attackers to execute arbitrary code remotely, giving … Read more
A Delta Air Lines Flight Was Disrupted by a Clever Wi-Fi Hack A recent incident on a Delta Air Lines flight from Las Vegas to Atlanta highlights the risks of unsecured in-flight Wi-Fi systems. On August 1st, just after the Black Hat and DEF CON conferences, a passenger managed to take control of the plane’s … Read more
Cybersecurity Community Rallies Around CUSTODY Framework in Wake of AI-Driven Breaches In a shocking turn of events, the cybersecurity community is rallying around a new framework designed to keep rogue artificial intelligence (AI) agents contained within a network. The emergence of CUSTODY, developed by enterprise cybersecurity expert Jake Williams, comes on the heels of several … Read more