FBI Drops Accenture Contractor After Sensitive Data Breach
Accenture lost an FBI contract after a missed security patch exposed sensitive employee data, raising serious concerns over operational security. The FBI pul...
general
20 articles
Nikkei discloses breaches of employees’ Microsoft, Google email accounts
Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts and used one to send thousa...
Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1...
Police Urge Passkey Use After Surge in Cybercrime Profits
Report Fraud says cybercrime revenue stemming from account takeover increased 417% annually
Data breach at Denmark’s population register exposes 8.8 million people
A data breach at Denmark’s Central Population Register (CPR) has exposed the personal information of 8.8 million people.
Getting Granular with Access, Attributes, and Intent - Alex Olivier - ASW #403
Social Engineering Detection Moves Into the Live Conversation
Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering. The post Soc...
Ransomware Affiliate Double-Crosses RaaS Operator to Steal Victim Funds
An affiliate of The Gentlemen RaaS group ran a parallel leak site during extortion of two dozen victims
11 Best Adaptive / Risk-Based Authentication Tools Compared (2026): Features & Pricing
Microsoft Conditional Access is the best adaptive engine for most workforces the deepest policy grammar at bundled cost while Duo wins pragmatic rollout, and...
Engineer sentenced for locking over 3,000 devices on employer network
A former core infrastructure engineer at an industrial company headquartered in New Jersey was sentenced to 32 months in prison for locking thousands of devi...
12 Best Biometric Authentication Solutions Compared (2026): Features & Pricing
iProov is the best high-assurance verification vendor the deepest liveness and injection-attack science while Entrust (Onfido) and Incode lead turnkey onboar...
12 Best Authentication-as-a-Service (AaaS) Providers Compared (2026): Features & Pricing
Auth0 (Okta’s developer line) remains the best AaaS for most teams the ecosystem and enterprise-credibility benchmark while Entra External ID and Amazon Cogn...
11 Best Cloud Directory Services Compared (2026): Features & Pricing
Microsoft Entra ID is the best cloud directory for most organizations bundle gravity plus the clearest AD-exit road while JumpCloud wins the domainless packa...
Critical WatchGuard Endpoint Security Flaw Exposes Kernel and Process Memory
A critical vulnerability exists in WatchGuard endpoint security products that could allow a local, authenticated attacker to bypass driver authentication and...
12 Best Secrets Management Tools Compared (2026): Features & Pricing
HashiCorp Vault remains the best dedicated secrets platform the dynamic-secrets benchmark, now under IBM while cloud-native stores win single-cloud estates o...
Atlassian CVE-2026-21589 Flaw Exposes Files in Jira and Confluence Data Center
Atlassian has announced a critical vulnerability related to arbitrary file access that affects Jira Software Data Center and Confluence Data Center. This vul...
Dell Urges Customers to Patch Critical DSU Flaw That Can Give Attackers Root Access
Dell warns that a critical DSU flaw lets attackers run code as root. Customers should patch affected PowerEdge systems as soon as possible.
Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each ...
FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
The U.S.
ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure
Fortinet details ClingSTUN, a Linux backdoor exploiting unpatched IoT devices and abusing public STUN servers to route traffic past NAT. FortiGuard Labs rese...