How ShinyHunters Exploited Salesforce Trust Relationships Without a Single Vulnerability
How ShinyHunters Exploited Salesforce Trust Relationships Without a Single Vulnerability
Over the past year, data-extortion activity linked to the group k
ThreatsDay: How Everyday Admin Tasks Turn Into Expensive Security Incidents
ThreatsDay: How Everyday Admin Tasks Turn Into Expensive Security Incidents
Most security incidents do not start with a high-profile hack. They begin with
Bad Epoll Linux Kernel Vulnerability: How a Simple Bug Delivers Full Root Access
Bad Epoll Linux Kernel Vulnerability: How a Simple Bug Delivers Full Root Access
The newly disclosed Bad Epoll vulnerability (CVE-2026-46242) exposes Linu
How Attackers Abuse Microsoft Device Code Flow to Compromise M365 Accounts
How Attackers Abuse Microsoft Device Code Flow to Compromise M365 Accounts
Attackers are increasingly shifting from traditional password phishing to more
Threat Actors Target Critical Gitea Docker Vulnerability CVE-2026-20896 Just 13 Days After Disclosure
Threat Actors Target Critical Gitea Docker Vulnerability CVE-2026-20896 Just 13 Days After Disclosure
Attackers are moving quickly to weaponize a recently
How DEBULL Tooling Abuses Microsoft Device-Code Flow to Compromise M365 Accounts
How DEBULL Tooling Abuses Microsoft Device-Code Flow to Compromise M365 Accounts
Attackers are increasingly abusing legitimate Microsoft authentication fl
SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT
SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT
Attackers are increasingly abusing legitimate remote access tools and SEO tactics to co
Closing the AI Agent Authority Gap with Continuous Security Observability
Closing the AI Agent Authority Gap with Continuous Security Observability
As enterprises rush to deploy AI agents across critical workflows, they are disc
Why Most AI Deployments Stall After the Demo (And How to Fix It)
Why Most AI Deployments Stall After the Demo (And How to Fix It)
AI demos are designed to impress. They are fast, clean, and often feel like a glimpse int
ThreatsDay Security Bulletin: Zero-Days, Legacy Vulnerabilities, and the Rising Risk to WordPress Sites
ThreatsDay Security Bulletin: Zero-Days, Legacy Vulnerabilities, and the Rising Risk to WordPress Sites
Every week brings a new wave of security stories,