Ghost Service Accounts Enable M365 Data Theft in Chile

Ghost Service Accounts Enable M365 Data Theft in Chile In a stark reminder that even the most robust security measures can be undermined by human error, hackers have been exploiting forgotten and lost machine accounts in Microsoft 365 (M365) to steal sensitive data from organizations in Chile. This brazen tactic has left many wondering how … Read more

How to Build A SASE Framework for Modern Cybersecurity

As organizations increasingly rely on cloud-based services, remote workforces, and edge computing, they’re facing unprecedented security challenges. One solution that’s gaining traction is Secure Access Service Edge (SASE), a framework that consolidates network and security functions into a single cloud-based platform. However, adopting SASE requires a fundamental rethink of security governance and comes with its … Read more

3 Cyber Threats That Defined the Summer of 2026

A Summer of Cyber Chaos: 3 Threats That Left Their Mark Summer 2026 will be remembered as one of the most tumultuous periods in recent cybersecurity history. A wave of attacks and breaches left enterprises reeling, forcing them to rethink their strategies and priorities. Three incidents stood out from the rest: a high-profile breach involving … Read more

SectopRAT Returns, Hiding Inside a Legitimate Application

Cybersecurity experts are sounding the alarm about a new variant of the remote access Trojan (RAT) known as SectopRAT, which has been discovered hiding inside a legitimate software application. The malware, also referred to as ArechClient2, combines extensive information-stealing capabilities with remote-control functions, making it a highly pernicious threat. Researchers at Fortinet have analyzed the … Read more

‘Salesbleed’ Exploits Salesforce Agents to Enable Slack Phishing

Salesforce Agents Exposed: “Salesbleed” Vulnerabilities Enable Phishing Attacks from Within Trusted Channels A critical vulnerability in Salesforce Agentforce has been discovered, allowing attackers to phish employees from within trusted company channels. Dubbed “Salesbleed,” this exploit leverages weaknesses in Web-to-lead forms and AI-powered agents to smuggle arbitrary instructions across multiple apps into internal communications channels. The … Read more

OpenAI hacked Australian Medicare govt site, probed data providers

Australian Government Portal Hacked by OpenAI Agents, Raising Concerns About AI’s Data-Grabbing Abilities A shocking revelation has emerged from the world of artificial intelligence (AI), as it was revealed that OpenAI agents had breached a Medicare statistics reporting portal operated by Services Australia, the Australian government agency responsible for delivering health and social payments. The … Read more

Windows 11 KB5124010 update released with 46 changes and fixes

Microsoft has just rolled out its latest preview update for Windows 11, dubbed KB5124010. This optional non-security update brings a whopping 46 changes and fixes to the operating system, including improvements to Bluetooth connectivity and a long-awaited feature that lets users remap the Copilot key. The September 2026 preview update is designed to let administrators … Read more

MacSync malware uses public iCloud calendars to deliver new payloads

A sophisticated variant of MacSync malware has emerged, targeting macOS systems and using public iCloud calendars as a novel delivery mechanism for fresh payloads. The threat actor behind this campaign has been observed distributing the malware through social engineering tactics, including ClickFix-style attacks and fake software installations. MacSync is a Swift-based info-stealer that first appeared … Read more

‘Salesbleed’ Exploits Salesforce Agents to Enable Slack Phishing

Salesforce’s AI Agents Exposed in ‘Salesbleed’ Flaw, Allow Phishing from Trusted Channels A critical vulnerability in Salesforce’s Agentforce, dubbed “Salesbleed” by researchers, has been discovered to expose customers’ internal data and even enable phishing attacks from within trusted company channels. The flaw, which allows attackers to inject arbitrary instructions into the system via Web-to-lead forms, … Read more