Wiz says many cloud alerts are not real attack paths
Wiz has published its State of Cloud Risk 2026 report, which argues that most high-severity cloud security findings…
Microsoft patches two critical Active Directory flaws
Semperis researchers have identified two critical Active Directory vulnerabilities, ResetNightmare and KerberLoss. Microsoft has issued patches for both…
APT28-linked campaign hijacks hotel Wi-Fi for logins
ReliaQuest has identified a campaign targeting public Wi-Fi gateways at hotels and conference centres to steal Microsoft 365…
Ubuntu snap-confine flaw can give attackers root access
Qualys has disclosed a local privilege escalation vulnerability in Ubuntu’s snap-confine component, tracked as CVE-2026-8933. The issue could…
Recast bundles endpoint management & patching tools
Recast has introduced a bundled endpoint management and patching offering that combines three existing products into one package…
Bitdefender flags Windows bind links that blind EDR
Bitdefender has identified three Windows attack techniques that can blind endpoint detection and response tools. The methods abuse…
Microsoft patches 622 flaws, including SharePoint bugs
Microsoft has released fixes for 622 vulnerabilities in its July Patch Tuesday update, including a record 416 affecting…
Microsoft makes passkeys default for Entra ID logins
Microsoft will make passkeys the default authentication method in Entra ID, starting with users enabled for SMS or…
Australian football fans share passwords, survey finds
ExpressVPN has published survey findings showing that 17% of Australian football fans have shared passwords so someone else…
Celebrity stalkerware leak exposes private messages online
Cybersecurity researcher Jeremiah Fowler and ExpressVPN have disclosed a data leak linked to suspected stalkerware that exposed private…
Splashtop launches unified IT platform for endpoints
Splashtop has launched a unified platform for IT operations, combining endpoint management, security, remote support and remote access…
Attackers shift upstream into Australia’s network edge
Lumen Technologies has released its 2026 Lumen Defender Threatscape Report, which argues that cyber attackers are shifting upstream…