**Free Identity Governance Tool Gets Major Boost** Tenfold’s Community Edition, a free identity governance tool designed for small organizations with under 150 users, has just received two significant new features. These updates will help IT teams better manage access to resources and protect sensitive data from unauthorized sharing. As the complexity of IT environments grows, … Read more
South Korean Banks Targeted by Suspected AI-Powered Attacks, Leaving Thousands of Customers Vulnerable A series of cyberattacks on South Korea’s financial institutions has left thousands of customers’ personal data exposed. The country’s Financial Services Commission (FSC) held an emergency meeting to address the situation, confirming a data breach at Shinhan Bank and similar incidents affecting … Read more
Italian Data Protection Authority Fines IQVIA $7.8 Million for Poor Data Handling Practices In a move that highlights the critical importance of robust data protection practices, Italy’s Data Protection Authority (GPDP) has fined multinational healthcare company IQVIA €7 million ($7.8M) for failing to properly anonymize sensitive health information. The fine is the latest in a … Read more
A Critical Microsoft Exchange Flaw Exposes Users’ Mailboxes, Leaving Millions Vulnerable A newly discovered vulnerability in Microsoft’s Exchange Server has left millions of users exposed, allowing authenticated attackers to read other users’ mailboxes. The issue, which affects various versions of Exchange Server, highlights the importance of robust security measures and regular updates. The flaw, a … Read more
Dell has warned customers about a critical vulnerability in its System Update (DSU) command-line interface (CLI) deployment tool, which allows hackers to gain root privileges on unpatched devices. The flaw, tracked as CVE-2026-86360, is considered critical because it can be exploited by an unauthenticated attacker to execute arbitrary code with root privileges. The DSU tool … Read more
Denmark’s Central Population Register has suffered a massive data breach, exposing the personal information of approximately 8.8 million registered individuals. This includes people who live in Denmark, those who have moved abroad, and even deceased individuals. The affected data encompasses names, addresses, dates of birth, marital status, and unique identification numbers assigned to each citizen. … Read more
A newly discovered exploit targeting the Realtek Jungle SDK, a widely used software development kit (SDK) for IoT devices and routers, has uncovered a sophisticated botnet dubbed “Cling.” The botnet uses STUN-based command-and-control (C2) communications to evade detection and wreak havoc on compromised networks. The Cling botnet is notable for its ability to spread across … Read more
A growing number of organizations have fallen victim to a sophisticated attack vector, where compromised credentials are used to unlock active attack paths and create devastating breaches. This alarming trend highlights the need for security teams to stay one step ahead of attackers who are increasingly exploiting identity exposure to gain unauthorized access. At its … Read more
A wave of high-profile vulnerabilities and security breaches has left many organizations vulnerable to identity exposure, which can be exploited to unlock active attack paths. In this week’s recap, we’ll delve into the latest developments in NetScaler and FortiMail 0-days, AI coding leaks, Spectre v2, and ransomware arrests. The recent disclosure of vulnerabilities in Citrix’s … Read more
A critical vulnerability in Dell’s System Update tool has been discovered, allowing hackers to gain root privileges on affected devices. The flaw, tracked as CVE-2026-86360, was revealed in a security advisory from Dell, which warned customers to patch the issue as soon as possible. Dell System Update is a command-line interface (CLI) deployment tool used … Read more