Attackers are repurposing an old spam evasion technique to bypass a new generation of AI-powered email security tools. Barracuda researchers say they have identified more than one million retail-themed phishing…
“The same generative tools that help security teams work faster are available to adversaries, and it shows,” Ahmed says. “Phishing campaigns read better and land more precisely than they did…
Fran Hutchings | Friday, 17 July 2026 at 13:35 UTC Back in April, we launched the Official Burp Ambassador Program: a community initiative designed to work more closely with experienced…
The Good | Authorities Sanction Cybercriminals & Dismantle Russian Bulletproof Hosting Infrastructure The EU and the United Kingdom have jointly sanctioned multiple Russian individuals and entities for targeting government networks…
CSO Conversations is a blog series interviewing Okta’s Regional CSOs supporting David Bradbury, Okta’s Chief Security Officer in providing the best service for our customers. Okta’s Regional CSOs are integral…
In this article Across the threat landscape, in this moment, one pattern sits at the center of the story: threat actors are following trust. They are not only looking for…
Major Threats & Vulnerabilities Record Patch Releases and Actively Exploited Zero-Days Microsoft’s July 2026 Patch Tuesday addressed a record 570 vulnerabilities, including three zero-days and two under active exploitation. Of…
What gets me about this one is the timeline. That token had been sitting there since October 2021. Nearly two years, inside Microsoft, before anyone caught it. If a team…
Application security teams are under pressure. With expanding application estates, growing API usage, and faster release cycles, many teams struggle to keep up. Backlogs grow, releases are delayed, and sometimes…
On March 21, 2025, Vercel disclosed a critical security vulnerability (CVE-2025-29927) which makes it possible to bypass authorization checks within a Next.js application if the authorization check occurs in middleware….
