A recent webinar shed light on the alarming phenomenon of identity exposure, revealing that in 11 separate cases, attackers exploited compromised identities to unlock active attack paths and wreak havoc on organizations. This disturbing trend highlights the critical need for robust identity governance and access control measures to mitigate the risks. The webinar focused on … Read more
A devastating $387 million crypto heist has left the cybersecurity community reeling, while a wave of exploits targeting Citrix systems and AI agents gone rogue have exposed vulnerabilities in our digital defenses. But what’s driving these attacks? At its core lies a critical issue: identity exposure. Identity exposure occurs when sensitive information about individuals or … Read more
In a stunning turn of events, the Netherlands has seen a dramatic escalation in hacking attacks by the notorious ShinyHunters collective, following the arrest of a key suspect with ties to the group. The 23-year-old individual, Pepijn van der Stap, was previously convicted for his role in data thefts and extortions, but had claimed to … Read more
Former US Soldier Sentenced to 70 Months in Prison for Hacking into AT&T and Verizon Systems A disturbing case of cybercrime has come to an end with a 22-year-old former Army soldier being sentenced to 70 months in prison for hacking into the systems of two major wireless carriers, AT&T and Verizon. Cameron John Wagenius, … Read more
Citrix NetScaler Flaws Leave Global Organizations Vulnerable to Attackers A critical cybersecurity alert has been issued by CISA, the US Cybersecurity and Infrastructure Security Agency, warning of widespread exploitation of two high-severity vulnerabilities in Citrix’s NetScaler Application Delivery Controller (ADC) product. The flaws, tracked as CVE-2026-1234 and CVE-2026-5678, allow attackers to bypass authentication and gain … Read more
Attackers Linked to JADEPUFFER Exploit Compromised Service Principals to Wipe Azure Resources A sophisticated cyberattack has been uncovered, where hackers exploited compromised service principals to delete critical resources in Microsoft Azure. The attack is linked to a notorious threat group known as JADEPUFFER, which has been making headlines for its ability to compromise high-value targets. … Read more
A sophisticated botnet has been discovered compromising Docker hosts to deploy a Telegram-controlled AI agent, marking a significant escalation in the threat landscape. Carbonato Botnet, as it’s been dubbed, has successfully infiltrated multiple organizations worldwide, raising concerns about data security and the potential for devastating attacks. Carbonato works by exploiting vulnerabilities in Docker, a popular … Read more
Identity exposure has become a pressing concern for organizations, as it can serve as a gateway for attackers to gain unauthorized access and wreak havoc on systems. A recent webinar shed light on this issue, highlighting 11 real-life examples of how identity exposure can unlock active attack paths, allowing malicious actors to exploit vulnerabilities in … Read more
ShinyHunters’ Fresh Oracle PeopleSoft Campaign Sparks Widespread Concern Google’s Threat Intelligence Group and Mandiant have sounded the alarm on a new wave of attacks by the notorious extortion group ShinyHunters, targeting Oracle PeopleSoft customers worldwide. This campaign marks a significant escalation in the group’s activities, with over 100 organizations affected so far. PeopleSoft is an … Read more
A sensitive personal data breach has compromised the information of nearly 400,000 people in Washington D.C. The incident affects Medicaid and DC Healthcare Alliance beneficiaries who enrolled between 2023 and 2026. The data breach was not caused by a cyber attack, but rather by an internal mistake at the District of Columbia Department of Health … Read more