Federation and Single Sign-On: How SSO Works and When It Breaks
SSO failure modes create cascading authentication outages across connected services
general
20 articles
Tego AI Discloses Second Claude Flaw in a Week: Hidden Link Silently Sends Files to Attackers
Tel Aviv, Israel, July 24th, 2026, CyberNewswire One week after disclosing that Anthropic’s Claude Tag Slack integration could be driven by plain “@Claude” t...
Andy Burnham signals continuity on UK cyber policy, reappoints minister despite scrapping ministry
The new British prime minister is retaining Liz Lloyd in a cyber policy role, making her one of the few Keir Starmer allies remaining in government.
What GRC Actually Controls
Organizations that mistake documentation for assurance discover gaps
Rep. Bacon warns CISA cuts weaken U.S. cyber defenses
House Armed Services Committee member urges faster cyber investments as China, Russia threats grow.
Service-to-Service Authentication: Patterns for Securing API and Microservices
Microservice architectures multiply the attack surface through service-to-service communication paths
Federation Outage Prevention: What breaks, how to test it and how to recover
Recovery is only as fast as your understanding of what depends on what.
'Wrench' attacks against crypto holders appear to be on the rise
There are more reports than ever before of strong-arm tactics like home invasions and kidnappings against cryptocurrency holders, researchers say.
US warns of Iran-linked attacks on critical infrastructure
Bad actors target PLCs from Siemens, Schneider Electric, and Rockwell Automation.
US warns of Iran-linked attacks on critical infrastructure
Iran-linked hackers target Siemens, Schneider, Rockwell OT.
Microsoft blames massive Microsoft 365 outage on maintenance bug
Microsoft says a bug in its automated network maintenance request system caused Thursday's massive outage by mistakenly removing IP routes from more devices ...
Why Role-Based Access Breaks at Hospital Scale — and What Replaces It
Attribute- and policy-based controls are makes minimum-necessary tractable without strangling care
Microsoft, tech companies throw weight behind spread of open-source AI
Other signatories of the letter include Meta, Palantir, Perplexity, Mistral, NVIDIA, Mozilla, The Linux Foundation, Hugging Face, Dell Technologies and IBM. ...
BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery
The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have been found to operate an ac...
Origin Energy confirms data breach impacting millions of customers
Following insights from Bleeping Computer, Australian energy provider Origin Energy has confirmed a significant data breach affecting potentially millions of...
macOS Gatekeeper vulnerability allows app replacement
As detailed in The Register, security researchers uncovered a vulnerability in Apple's macOS Gatekeeper security feature that could allow malicious actors to...
In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel Flaws
Noteworthy stories that might have slipped under the radar: Siemens ROX II industrial switch vulnerabilities, Russian Zimbra webmail espionage campaign, Stad...
Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller
Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain ...
How to Evaluate Attack Surface Reduction and Remediation Workflows
Notification delivery creates a false completion signal
Chick-fil-A data breach affects more than 13,000 customers
Chick-fil-A has confirmed that over 13,000 customers had their accounts breached in a wave of credential stuffing attacks targeting its website and mobile ap...