Microsoft has enhanced Defender with new Security Exposure Management features, specifically targeting protection for critical infrastructure assets like domain controllers and web servers. This update […]
Category: 128
128: Widespread Vulnerabilities Highlight Need for Patch Management and Supplier Transparency
Cisco Talos has disclosed 30 new vulnerabilities affecting major brands, including TP-Link (10 flaws), Canva (19), and Hikvision (1). All vendors acted promptly to issue […]
128: Who Governs the Machines? Microsoft’s Guidance on AI Agent Authority in the Enterprise
Microsoft’s latest guidance addresses the governance of AI agents in enterprise, highlighting the need for clear authority as these systems act autonomously. Decisions involve user […]
128: PyPI LiteLLM Supply Chain Attack Highlights Open-Source Security Risks
The widely used open-source LiteLLM Python package on PyPI has been compromised by the TeamPCP hacking group, resulting in leaked data from hundreds of thousands […]
128: Microsoft Issues Guidance on Governing AI Agent Behaviour in the Enterprise
Artificial intelligence agents are rapidly entering mainstream business operations, raising key governance questions. Microsoft has issued updated guidance for enterprises on managing AI behaviour, emphasising […]
128: Tycoon2FA Phishing Platform Rapidly Resurrects After Global Takedown
Tycoon2FA, a major phishing-as-a-service platform, has swiftly resurfaced following a coordinated takedown led by Microsoft and Europol, which disrupted 330 domains. This resurgence highlights the […]
128: AWS Bahrain Outage: How Geopolitical Events Can Disrupt Cloud Services
AWS recently suffered a significant outage in its Bahrain region, triggered by airspace closures linked to Middle East conflict. While AWS attributed the incident to […]
128: Cisco Talos ‘Year in Review 2025’: Essential Takeaways for IT Security Leaders
Cisco Talos’ 2025 ‘Year in Review’ is a must-read for IT security professionals, offering actionable insight on the ever-adapting tactics of cybercriminals. Unlike compliance-driven reports, […]
128: Trivy Supply Chain Attack Highlights Risks in DevOps Toolchains
The Trivy vulnerability scanner, widely adopted within DevSecOps pipelines, was recently breached by TeamPCP, who injected credential-stealing malware via Trivy’s official releases and GitHub Actions. […]
128: Azure Monitor Alerts Abused in Callback Phishing Campaigns
Cybercriminals are hijacking Microsoft Azure Monitor alerts to execute sophisticated callback phishing attacks. By impersonating the Microsoft Security Team, attackers send fake notifications about suspicious […]
