Microsoft Confirms Entra ID Zero-Day Was Exploited Before the Fix Went Live
Microsoft has disclosed CVE-2026-69836, a maximum-severity deserialization flaw in Entra ID that attackers exploited in the wild before the company silently patched it server-side. There is no customer...
How One Phishing Email Let Attackers Bypass MFA and Redirect a Company’s Vendor Payments
An HR-themed phishing lure led a finance employee to a fake Microsoft 365 login that stole an authenticated session cookie, letting attackers bypass MFA entirely. Over the following...
Researchers Show How a Signed Windows Defender Driver Could Be Turned Against Security Tools
Check Point researchers reverse-engineered Microsoft Defender's BTR.sys driver and found that its undocumented transaction protocol could be reproduced to disable antivirus and EDR products from the Windows kernel...
Hijacked Rust Crates With 244 Million Downloads Turned Into Malware Delivery Pipeline
A typosquatted Rust package quietly hijacked two popular crates, arrayref and append-only-vec, to run an infostealer during ordinary builds. The attack hid inside an automatically-executed build script, leaving...
Feds Sound Alarm on Active Hacking Campaign Targeting Siemens S7 PLCs Nationwide
NSA, CISA, the FBI, DOE and EPA have jointly warned that hackers are actively scanning for and probing Siemens S7-series PLCs across U.S. critical infrastructure. The campaign favors...
CISA Gives Agencies Until August 21 to Patch Actively Exploited Windows VPN Flaw
CISA has added a double-free memory corruption bug in Microsoft's Internet Key Exchange service extensions to its Known Exploited Vulnerabilities catalog after confirming active attacks, giving federal agencies...
How T-Mobile’s Security Team Cut a Cable to Physically Kick Salt Typhoon Off Its Network
Newly reported details describe how T-Mobile's security team tracked Chinese state-linked hackers from Salt Typhoon to a compromised router at a third-party data center in 2024 — and...
Citrix Patches Critical NetScaler Flaw That Lets Attackers Skip the Login Screen Entirely
Citrix has patched two new NetScaler ADC and Gateway vulnerabilities, including a 9.3-severity authentication bypass that can let remote attackers slip past login controls on SSL VPN, ICA...