Novo Nordisk Breach Highlights Software Development Pipeline Risk

A leaked GitHub token underscores what most organizations get wrong: Treating secrets management as a tooling problem rather than an identity problem. A leaked GitHub token underscores what most organizations get wrong: Treating secrets management as a tooling problem rather than an identity problem. Read More
Operation Escaneo Signals Shift in LatAm Threat Landscape

The threat group’s curious business model may combine opportunistic monetization alongside intel collection, without much coordination between the two. The threat group’s curious business model may combine opportunistic monetization alongside intel collection, without much coordination between the two. Read More
FIFA Bug Exposes World Cup Streams to Remote Takeover

A hacker could have “Rickrolled” the World Cup — or worse — thanks to FIFA’s unenforced Entra access controls. A hacker could have “Rickrolled” the World Cup — or worse — thanks to FIFA’s unenforced Entra access controls. Read More
Salesforce Data Thefts Continue via Klue App Compromise

Klue’s Battlecards is now the third integrated application that has been compromised to steal customers’ Salesforce data, and victims include Huntress, the cybersecurity vendor. Klue’s Battlecards is now the third integrated application that has been compromised to steal customers’ Salesforce data, and victims include Huntress, the cybersecurity vendor. Read More
Get Out of Security Debt by Tackling the Exposure Problem

Teams digging out of security debt need to answer only two simple questions: Which vulnerabilities in our systems are exposed, and how long should they stay that way? Teams digging out of security debt need to answer only two simple questions: Which vulnerabilities in our systems are exposed, and how long should they stay that way? Read […]
EU Gets a Head Start in Developing 6G Network Security

“Shield-6G” will combine AI threat detection, digital twins, honeypots, and more, to help carriers protect 6G networks against the threats of tomorrow. “Shield-6G” will combine AI threat detection, digital twins, honeypots, and more, to help carriers protect 6G networks against the threats of tomorrow. Read More