In this article Across the threat landscape, in this moment, one pattern sits at the center of the story: threat actors are following trust. They are not only looking for…
Major Threats & Vulnerabilities Record Patch Releases and Actively Exploited Zero-Days Microsoft’s July 2026 Patch Tuesday addressed a record 570 vulnerabilities, including three zero-days and two under active exploitation. Of…
What gets me about this one is the timeline. That token had been sitting there since October 2021. Nearly two years, inside Microsoft, before anyone caught it. If a team…
Application security teams are under pressure. With expanding application estates, growing API usage, and faster release cycles, many teams struggle to keep up. Backlogs grow, releases are delayed, and sometimes…
On March 21, 2025, Vercel disclosed a critical security vulnerability (CVE-2025-29927) which makes it possible to bypass authorization checks within a Next.js application if the authorization check occurs in middleware….
In this article From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer environments. These campaigns are successfully using ClickFix lures to steal…
A critical vulnerability in Zoom’s Windows software could allow an unauthenticated attacker to hijack user accounts over the network. The latest security release also addresses several high-severity vulnerabilities affecting privilege…
Embodied AI puts a model inside a machine that operates in the physical world: a robot, an arm, a humanoid. Once a model gains motors, sensors and a body, it…
Amelia Coen | Friday, 12 September 2025 at 12:21 UTC Arman S. (Tess), a full-time independent security researcher and bug bounty hunter, talked us through how he uses Burp Suite…
Every so often, a vulnerability reminds us how deeply our digital infrastructure relies on foundational libraries. Recently, the Okta Red Team discovered HollowByte, a Denial of Service (DoS) vulnerability in…
