Tag Archive

Quick Answer: CyberArk remains the enterprise PAM benchmark; BeyondTrust and Delinea complete the leader trio; ManageEngine PAM360 wins value; HashiCorp Vault owns machine/secrets privilege; and Microsoft Entra PIM covers Azure-role JIT for E5 estates. Ransomware crews hunt privileged credentials first …

A web cache poisoning technique called cache key injection could let attackers access restricted data, disrupt websites, or poison cached pages with malicious content. Alex Brumen’s research shows attackers don’t always need to exploit unkeyed HTTP request values, the usual …

Quick Answer: Microsoft Entra ID wins on bundled value inside M365 estates; Okta wins on neutrality and app-catalog breadth; Ping Identity (which now includes ForgeRock) owns complex enterprise and CIAM; CyberArk leads security-first identity; JumpCloud leads SMB directory+IAM. Identity is …

Hackers are using a layered Windows malware chain to run an XMRig cryptocurrency miner while keeping its key parts out of sight. The operation hides code in the Windows Registry, a PNG image, and files that appear to be ordinary …

Exim 4.100.1 fixes four security vulnerabilities, including high-severity Proxy Protocol and GnuTLS use-after-free flaws and a medium-severity SMTP smuggling issue that could let attackers alter submitted email content. The security release was announced on September 18, 2026, and affects Exim …

This week’s roundup covers a maximum-severity Cisco ISE zero-day under active exploitation, an actively exploited Android modem flaw on Pixel devices, a browser-extension attack that hijacks AI agents across five browsers, and researchers using Claude Opus 5 to compromise OpenAI’s …

Adam Ochayon, VP of Strategy, Oasis Security  Deploying agentic AI in the enterprise is no longer optional – it’s fundamental to survival. And the main unlock to ensure security while deploying agentic AI is through agentic access management.  AI agents improve efficiency, reduce …

For several years the forecast has been constant: AI lowers the skill barrier, AI writes novel malware, AI will soon run attacks end to end with minimal human direction. It is worth noticing where that forecast mostly came from. Not from the people who …

By Crystal Morin  Ransomware crews have always followed the money. For years, that meant targets like banks and hospitals organizations with high-value assets and sensitive data who couldn’t afford downtime. Now, it means AI models too.  A threat actor the Sysdig Threat Research Team (TRT) dubbed JADEPUFFER has …

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are actively exploiting three Linux kernel vulnerabilities, creating an urgent patching and investigation deadline. CISA added CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964 to its Known Exploited Vulnerabilities catalog on September …