A Critical Flaw in Active Directory Exposes Organizations to Domain Compromise A disturbing vulnerability has been discovered in Microsoft’s Active Directory Certificate Services, which can be exploited by an attacker with minimal privileges to compromise an entire domain. The flaw, tracked as CVE-2026-54121, is a result of a combination of trust and privilege failure, rather … Read more
Widespread Outage Brings GitHub to its Knees, Leaving Developers Scrambling A devastating global outage has crippled GitHub, a crucial platform for developers and open-source projects, sending shockwaves through the tech industry. As of this morning, thousands of users are experiencing errors accessing various parts of the website, including API requests, Actions, Webhooks, Issues, and Pull … Read more
Cybersecurity Threats Escalate as Identity Exposure Creates Active Attack Paths A recent investigation has uncovered a concerning trend in cyber attacks, where compromised identities are being exploited to create active attack paths. This alarming phenomenon not only puts sensitive data at risk but also reveals a sophisticated approach employed by attackers to breach even the … Read more
A recently disclosed vulnerability in Microsoft’s Active Directory Certificate Services has exposed a hidden privilege that can be exploited to gain control over an entire domain. The flaw, tracked as CVE-2026-54121, is known as Certighost and it allows an attacker to coerce a Certification Authority (CA) into issuing a valid authentication certificate for a Domain … Read more
GitHub’s Global Outage Leaves Developers Reeling A massive disruption is affecting developers worldwide as GitHub, a popular platform for collaboration and version control, has gone dark. The outage, which began early on August 17th, has crippled various services, including API Requests, Actions, Webhooks, Issues, and Pull Requests, leaving many users unable to access their projects. … Read more
A Critical Vulnerability in Unisoc’s VoLTE Technology Exposes Android Devices to Kernel Access Attacks A devastating exploit chain has been discovered in Unisoc’s Voice over LTE (VoLTE) technology, which is used by numerous Android device manufacturers worldwide. The vulnerability allows attackers to gain full access to the Android kernel, essentially giving them free rein to … Read more
A newly discovered vulnerability in MCP servers is allowing hackers to gain access to sensitive enterprise data, putting thousands of organizations worldwide at risk. The issue, which affects a broad range of businesses and industries, stems from the way MCP systems handle identity exposure, creating an open door for attackers to exploit. The problem arises … Read more
Security experts are sounding the alarm over a concerning trend: identity exposure is being used as a key enabler for active attack paths. What this means in plain terms is that hackers are exploiting vulnerabilities in how companies manage user identities, effectively creating backdoors into networks and systems. This can happen even when robust security … Read more
As we approach the final stretch of the year, IT administrators are being reminded that a critical deadline is fast approaching. In just 60 days, on October 13th, Microsoft’s Windows Server 2022 will reach its mainstream end date, marking the beginning of the end of free support for this version of the operating system. For … Read more
A suspected China-nexus cyber actor has been linked to a series of high-profile attacks that exploit a critical vulnerability in VMware vCenter, leading to the deployment of Babuk-derived ransomware on compromised systems. The attacks have affected multiple organizations across various industries, with some reports indicating that sensitive data has already been exfiltrated. The vulnerability in … Read more