Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
Federal authorities have seized seven domains supporting MicroScan and FishHub, platforms allegedly operated by a Chinese contractor and used by Flax Typhoon to target critical infrastructure globally.
IDC Frontier's IDCF Cloud service experienced a significant outage after a ransomware attack on its East Japan Region 1 infrastructure, impacting hundreds of organizations including local governments.
Researchers have uncovered a malware campaign called Midnight Mimosa embedded in the firmware of low-cost Android devices, granting attackers system-level access to install apps, commit ad fraud, and convert phones into residential proxies.
GitHub's security team profiles @vaib25vicky, a leading researcher in their VIP bug bounty program, discussing how they identify authorization flaws and approach feature testing.
Cisco disclosed five critical vulnerabilities in NX-OS affecting Nexus 3000 and 9000 Series switches that could allow attackers to execute arbitrary code with root privileges or trigger denial-of-service conditions.
Employees authorize third-party app access in seconds, but reviewing those OAuth grants properly takes far longer. Security teams need automation to keep pace with the scale of the problem.
Microsoft is rolling out integrations with third-party synthetic media detection tools and new identity verification features in Teams meetings, with general availability expected in November.
The UK fashion retailer disclosed that attackers impersonated a trusted contact to compromise an employee account, then leveraged those credentials to access third-party platforms holding customer data.
