Advertisement
OAuth Grants: Hidden Access, Persistent Risk for Enterprises
OAuth grants create persistent trust relationships between apps, often bypassing SSO and MFA, leading to overlooked security risks and potential data breaches.
Cloudflare Account Abuse Protection Dashboard Released
Cloudflare introduces a new Account Abuse Protection dashboard to help security teams investigate credential stuffing and online fraud.
SPIFFE/SPIRE Identity Misuse: Kubernetes Post-Exploitation
Discover how root access on a Kubernetes node enables workload identity spoofing in SPIFFE/SPIRE environments using the Spooffe tool.
FreeIPA Critical Chain: Anonymous Admin via CVE-2026-76578
Critical FreeIPA flaw chain (CVE-2026-76578, CVE-2026-76560) enables anonymous clients to forge admin credentials on default installations. Patch now.
IDScan Sued Over Alleged Breach Impacting 153 Million Drivers
IDScan faces lawsuits after a dark-web service allegedly offered to sell 153 million driver's licenses and millions of other identity documents.
Entra Log Analysis: Detecting Password Spray Attacks with PowerShell
Learn to analyze Microsoft Entra sign-in logs using PowerShell to detect password spray attacks and anomalous successful logins from unexpected geographic locations.
Advertisement
Auditing Entra ID MFA Gaps with PowerShell and Microsoft Graph
A new PowerShell script helps security teams identify Microsoft Entra ID users not registered for MFA or using weaker authentication methods.
Securing Model Context Protocol (MCP) Traffic with Cloudflare
Learn how Cloudflare One identifies inspected Model Context Protocol traffic and controls AI agent tool calls to secure enterprise environments.
Cybersecurity M&A Trends: Key Acquisitions in July 2026
July 2026 saw 21 cybersecurity M&A deals, including major acquisitions by CrowdStrike, Okta, and Palo Alto Networks enhancing platform capabilities.
Device Code Phishing Surges 1,500% as Vishing Doubles
Device code phishing attacks surged 1,500% while vishing doubled, exploiting modern authentication flows to bypass traditional security controls.
Microsoft Teams Abused in Helpdesk Impersonation Attacks: TTPs & Mitigations
Microsoft warns of helpdesk impersonation attacks via Teams external collaboration.