Tag Archive

A high-severity Telegram Desktop vulnerability let attackers hide JavaScript in bot-created inline keyboard buttons and steal chat content when victims exported conversations as HTML files. Telegram fixed the issue in Desktop Beta 6.9.4 and Stable 7.0.1, but HTML exports created …

Cybercriminals are using autonomous AI agents to turn compromised cloud systems into rapid credential-harvesting platforms. In a newly documented case, a suspected financially motivated actor planned, built, and ran a large-scale operation in under six hours, taking thousands of third-party …

Microsoft has confirmed that the September 8, 2026 Excel security update KB5002914 can silently break copy and paste in Excel 2016, 2019, 2021, and 2024. Microsoft added the defect to the update’s known issues after Patch Tuesday users reported that …

Threat actors have been observed exploiting a critical remote code execution vulnerability in the Marimo notebook platform to steal AWS credentials and authenticate to an SSH bastion host within eight seconds. The attack, documented by the Sysdig Threat Research Team, …

Windows attackers are turning a built-in recovery feature into a tool for disruption. By abusing Volume Shadow Copy Service, intruders can copy protected data, access the Active Directory database, and erase recovery copies after ransomware. The technique blends into Windows …

Hackers have used a trusted Reddit identity to turn advertisements into a malware delivery channel. A compromised, verified HBO Max account, u/hbomax, published 108 malicious ClickFix ads over 48 hours, sending people toward fake software pages. The campaign did not …

Serverless changed the attack surface: no host to protect, but every function is a tiny privileged identity with its own code, dependencies, and permissions and there are thousands of them. Security shifted to least-privilege function roles, code and dependency scanning, …

Kubernetes security has its own shape admission control gating what deploys, network policy governing pod-to-pod traffic, runtime detection watching live workloads, and posture checking cluster configuration across modern multi-cloud security architectures. Sysdig and Aqua lead as specialists, Red Hat ACS …

Container security spans the whole lifecycle build (image scanning, IaC), ship (registry, admission), and run (runtime detection, drift) across modern multi-cloud security architectures. Aqua and Sysdig lead as specialists, Snyk owns developer-first shift-left, and the platform CNAPPs (Prisma, Wiz, CrowdStrike) …

Bottom line up front: cloud identities human and machine are the perimeter now, and most are wildly over-privileged. CIEM answers “who can reach what, and should they,” then right-sizes it across complex multi-cloud security architectures. The market splits three ways: …