Section

Articles

114 stories

The Marketing Stack Joins the Zero-Click Risk List as Adobe Rushes a Maximum-Severity Campaign Classic Fix

August 2, 2026 · 5 min read

Marcus Wei

Senior security reporter covering threat intel, identity, and enterprise security architecture. Zero Trust

Zero Trust

The Build Pipeline Becomes the Attack Surface as an Unauthenticated Flaw Puts Every TeamCity Server at Risk

August 1, 2026 5 min read

Marcus Wei

Senior security reporter covering threat intel, identity, and enterprise security architecture. Cloud Security

Cloud Security

One Signing Key Nearly Exposed Every Azure Cosmos DB Tenant, and Microsoft Needed Eight Months to Kill It

July 31, 2026 5 min read

Elena Volkov

Staff writer covering cloud security, zero trust, and vulnerability management. Threat Intelligence

Threat Intelligence

Credential Rotation No Longer Evicts Attackers as Void Blizzard’s OWAReaper Persists Inside Exchange Mailboxes

July 30, 2026 5 min read

Elena Volkov

Staff writer covering cloud security, zero trust, and vulnerability management. Threat Intelligence

Threat Intelligence

The Management Plane Becomes the Blind Spot as a 20-Year-Old IPMI Flaw Leaks Password Hashes From Thousands of Servers

July 29, 2026 5 min read

Elena Volkov

Staff writer covering cloud security, zero trust, and vulnerability management. Threat Intelligence

Threat Intelligence

GitHub and PyPI Make Delay the Default as Package Ecosystems Move to Blunt Supply-Chain Poisoning

July 27, 2026 5 min read

Elena Volkov

Staff writer covering cloud security, zero trust, and vulnerability management. Threat Intelligence

Threat Intelligence

The Browser Becomes the Payload Factory as SourTrade Assembles Malware From Memory, Not Disk

July 26, 2026 5 min read

Marcus Wei

Senior security reporter covering threat intel, identity, and enterprise security architecture. Zero Trust

Zero Trust

Hotel and Conference Wi-Fi Gateways Become a Microsoft 365 Credential Theft Layer, ReliaQuest Finds

July 25, 2026 5 min read

Elena Volkov

Staff writer covering cloud security, zero trust, and vulnerability management. Threat Intelligence

Threat Intelligence

The HTML Sanitizer Becomes the Weak Link as Russian State Hackers Exploit a Zimbra Bypass for Five Months

July 24, 2026 4 min read

Elena Volkov

Staff writer covering cloud security, zero trust, and vulnerability management. Threat Intelligence

Threat Intelligence

AI Orchestration Tools Become the Preferred Beachhead as Langflow Lands on CISA’s Watch List for the Fourth Time This Year

July 23, 2026 4 min read

Elena Volkov

Staff writer covering cloud security, zero trust, and vulnerability management. Threat Intelligence

Threat Intelligence

Microsoft 365 Calendars Become State-Linked Malware’s Newest Command-and-Control Hideout

July 22, 2026 5 min read

Elena Volkov

Staff writer covering cloud security, zero trust, and vulnerability management. Threat Intelligence

Threat Intelligence

A Year After Cl0p’s Oracle EBS Campaign, Breach Notices Are Still Landing, and Estee Lauder Is the Latest

July 21, 2026 5 min read