Tag Archive

Container security spans the whole lifecycle build (image scanning, IaC), ship (registry, admission), and run (runtime detection, drift) across modern multi-cloud security architectures. Aqua and Sysdig lead as specialists, Snyk owns developer-first shift-left, and the platform CNAPPs (Prisma, Wiz, CrowdStrike) …

Bottom line up front: cloud identities human and machine are the perimeter now, and most are wildly over-privileged. CIEM answers “who can reach what, and should they,” then right-sizes it across complex multi-cloud security architectures. The market splits three ways: …

Bottom line up front: almost nobody buys a standalone CASB anymore it’s a function of a secure web gateway/SSE platform, and increasingly overlaps with SSPM for SaaS posture. Netskope leads on depth, Microsoft Defender for Cloud Apps on Microsoft-estate economics, …

Cisco has issued an urgent warning regarding an actively exploited zero-day vulnerability in its Secure Email Gateway appliances that allows remote, unauthenticated attackers to execute arbitrary commands with highest-level root privileges. Tracked as CVE-2026-76461, the flaw stems from a severe …

British fintech Revolut has confirmed a data breach in which an unauthorized third party obtained sensitive customer records by submitting fraudulent information requests through an email address using a legitimate government agency’s domain. Unlike a conventional intrusion, the attacker did …

Researchers have uncovered an exposed attacker-controlled staging server containing evidence of a wide-ranging intrusion targeting 3BB, the consumer brand operated by Thailand’s Triple T Broadband. The investigation links the operation to the exploitation of a critical SSL-VPN vulnerability, followed by …

Hackers are conducting a large-scale automated scanning campaign against internet-exposed Vite development servers, attempting to steal AWS credentials, Azure access tokens, environment variables, and Infrastructure-as-Code secrets. F5 honeypot sensors recorded 807 session-grouped attacks and about 32,000 raw events in August …

The UK government has begun rolling out passkeys across GOV.UK One Login, offering more than 23 million users a passwordless way to access public services. The deployment covers everything from childcare support and driving license renewals to State Pension checks …

Nintendo has patched a high-severity vulnerability in the original Nintendo Switch that could let a nearby attacker execute unauthorized code and access information stored on the console. Tracked as CVE-2026-82079, the flaw affects firmware earlier than 23.0.0 and resides in …

Microsoft is offering security researchers up to $30,000 for finding critical AI vulnerabilities in Dynamics 365 and Power Platform, sharpening its focus on flaws that could manipulate AI inference or expose information through model behavior. The program covers qualifying bugs …