As organizations scale AI and agents across environments, security teams need protection that covers every surface. The Microsoft vision is simple: security should be ambient and autonomous, just like the…
A CVE lands in the morning. Hours later, attackers are exploiting it in the wild. The patch is not ready, the change window is days away, and the clock is…
Today, we are announcing the Cloudflare Monetization Gateway, an engine that will give Cloudflare customers the ability to charge for any asset protected by Cloudflare: web pages, datasets, APIs, or…
Oracle addresses 243 CVEs in its June 2026 Critical Security Patch Update with 245 patches, including 122 critical updates. Key Takeaways The June 2026 Critical Security Patch Update (CSPU) contains…
Barracuda’s June 2026 research shows phishing campaigns are evolving beyond credential theft to session hijacking, authentication attacks, and malware delivery. Attackers now abuse legitimate Microsoft services, short-lived phishing infrastructure, and…
Email is still the most reliable way for an attacker to get inside your organization. Not because perimeter defences are weak — but because email is designed to be opened….
Days 1–30: Map assets and identities at the IT/OT boundary The first 30 days are for increased visibility. I focus on a relatively simple question: “Who and what can currently…
Key Points The threat actor uses multiple channels to promote and distribute a Rust clipboard hijacker, starting with a dedicated phishing page as the central hub and extending to GitHub…
Hassan Ud-Deen | Friday, 1 May 2026 at 06:52 UTC Senior pentesters have a deeply refined intuition about what is vulnerable in an environment. The problem? That expertise is often…
We are planning future work in relation to the evasion capabilities present in Metasploit Framework, and how they function/are presented to users. We are currently accepting responses to our feedback…
