Top 10 Best Cloud Access Security Broker (CASB) Solutions in 2026

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Bottom line up front: almost nobody buys a standalone CASB anymore it’s a function of a secure web gateway/SSE platform, and increasingly overlaps with SSPM for SaaS posture. Netskope leads on depth, Microsoft Defender for Cloud Apps on Microsoft-estate economics, …

Hackers Exploit Critical Cisco Secure Email Gateway Vulnerability in the Wild to Run Malicious Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco has issued an urgent warning regarding an actively exploited zero-day vulnerability in its Secure Email Gateway appliances that allows remote, unauthenticated attackers to execute arbitrary commands with highest-level root privileges. Tracked as CVE-2026-76461, the flaw stems from a severe …

Revolut Data Breach Via Fake Government Requests – What We Know So Far

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

British fintech Revolut has confirmed a data breach in which an unauthorized third party obtained sensitive customer records by submitting fraudulent information requests through an email address using a legitimate government agency’s domain. Unlike a conventional intrusion, the attacker did …

Hackers Exploit FortiGate SSL-VPN Vulnerability to Attack Broadband Provider

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers have uncovered an exposed attacker-controlled staging server containing evidence of a wide-ranging intrusion targeting 3BB, the consumer brand operated by Thailand’s Triple T Broadband. The investigation links the operation to the exploitation of a critical SSL-VPN vulnerability, followed by …

Hackers Mass-Scan Exposed Vite Servers to Steal AWS and Azure Cloud Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are conducting a large-scale automated scanning campaign against internet-exposed Vite development servers, attempting to steal AWS credentials, Azure access tokens, environment variables, and Infrastructure-as-Code secrets. F5 honeypot sensors recorded 807 session-grouped attacks and about 32,000 raw events in August …

UK Government Begins Moving 23 Million Users Away From Passwords

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The UK government has begun rolling out passkeys across GOV.UK One Login, offering more than 23 million users a passwordless way to access public services. The deployment covers everything from childcare support and driving license renewals to State Pension checks …

Nintendo Switch Vulnerability Allows Attackers to Run Unauthorized Code on Your Console

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Nintendo has patched a high-severity vulnerability in the original Nintendo Switch that could let a nearby attacker execute unauthorized code and access information stored on the console. Tracked as CVE-2026-82079, the flaw affects firmware earlier than 23.0.0 and resides in …

Microsoft Offers Up to $30,000 for Critical AI Flaws in Dynamics 365 and Power Platform

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft is offering security researchers up to $30,000 for finding critical AI vulnerabilities in Dynamics 365 and Power Platform, sharpening its focus on flaws that could manipulate AI inference or expose information through model behavior. The program covers qualifying bugs …

AWS Systems Manager Agent Vulnerability Allows Attackers to Bypass Port-Forwarding Restrictions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in the AWS Systems Manager Agent could let authenticated attackers bypass remote-host port-forwarding restrictions and access sensitive link-local services, including the Amazon EC2 Instance Metadata Service. The flaw, tracked as CVE-2026-89049, affects Amazon SSM Agent versions earlier …

Malicious Twitch Extension Exposes OAuth Tokens of 30,000 Chrome and Firefox Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A browser extension promoted as a Twitch viewing helper has been found sending live account tokens through servers controlled by its operator. The add-on, called “Twitch Enhanced Viewer | JeetBot,” was available to Chrome and Firefox users and advertised conveniences …