Every time employees connect AI tools, automation platforms, or productivity apps to services like Google or Microsoft, they leave behind something many organizations fail to track, long-lasting OAuth tokens. These tokens often have no expiration, no automatic cleanup, and in…
A highly advanced cyber espionage group with ties to China has been linked to a wave of attacks against government institutions in South America and southeastern Europe, according to new findings from Cisco Talos. The threat group, tracked as UAT-8302,…
The Apache Software Foundation (ASF) has rolled out security updates to fix multiple issues in its HTTP Server, including a high-risk vulnerability that could allow attackers to execute code remotely. The flaw, tracked as CVE-2026-23918 and rated 8.8 on the…
A cyber campaign known as Contagious Interview, believed to be linked to North Korean threat actors, is expanding its reach by planting malicious packages across several major developer ecosystems. Security researchers have discovered that the attackers are disguising malware as…
Enterprise identity management is reaching a critical point. As organizations grow and adopt more applications, cloud services, and automation tools, identity systems are becoming fragmented and harder to control. This fragmentation has led to what experts now describe as “identity…
A Russia-linked threat group known as APT28 has launched a new wave of targeted attacks against Ukraine and its international partners, deploying a previously unknown malware framework called PRISMEX. Security researchers report that the campaign has been active since at…
Cybersecurity researchers have uncovered details about a stealth-focused botnet known as Masjesu, a growing threat built to launch distributed denial-of-service (DDoS) attacks while staying under the radar. First appearing around 2023, Masjesu has been promoted on Telegram as a paid…
Cybersecurity researchers have identified a new version of the Chaos malware that is now actively targeting poorly secured cloud environments. This marks a shift from its earlier focus on routers and edge devices to more complex cloud-based infrastructure. According to…
Cybersecurity researchers have uncovered a previously unknown zero-day vulnerability in Adobe Reader that attackers have been actively exploiting through specially crafted PDF files since late 2025. The issue, analyzed by EXPMON researcher Haifei Li, involves a highly advanced PDF-based exploit…
As artificial intelligence tools become easier to access, many employees are starting to use them without approval from their organization’s IT or security teams. While these tools can improve efficiency and help automate daily tasks, they also introduce a growing…
