Microsoft patches two critical Active Directory flaws
Semperis researchers have identified two critical Active Directory vulnerabilities, ResetNightmare and KerberLoss. Microsoft has issued patches for both…
Fake Windsurf extension uses Solana to steal dev data
Bitdefender researchers have identified a malicious extension that targeted the Windsurf integrated development environment (IDE) and used the…
Healthcare tops cyber attacks on Australian OT & IoT
Nozomi Networks Labs reports that healthcare services was the most targeted industry in Australia for operational technology (OT)…
Google warns of AI model theft & state-backed misuse
Google’s Threat Intelligence Group (GTIG) reports a rise in attempts to extract and replicate the logic of its…
Microsoft patches Windows zero-day & risky Office flaws
Microsoft has released fixes for 54 security vulnerabilities in its latest monthly security update, including a Windows zero-day…
Phishing campaign uses fake Microsoft apps to bypass MFA
Proofpoint has identified a complex phishing campaign using counterfeit Microsoft OAuth applications to evade Multi-Factor Authentication (MFA) and…