Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap
Attackers found a Microsoft 365 sign-in path that many MFA policies were not watching. A password spray campaign targeting Azure...
Vendor News
Category Added in a WPeMatico Campaign
“Exploit mitigation” stalled around 2008. The attacks didn’t.
The core of my last post was an asymmetry. An attack can unfold in two steps or 20, but the...
1 Year of This Popular Antivirus is on Sale for $20
TL;DR: Bitdefender is a comprehensive antivirus that comes with a VPN, and a 1-year subscription is only $20 right now (reg. $49.99)....
AI Agents Are Creating a New Enterprise Security Gap
In the week ending June 29, 2026, five independent security research teams published findings that collectively describe the same structural...
New Cargo Theft Surge: From Lobster Heists To Bourbon Warehouse Scams
Illustration of a long shadow truck with a thiefgettyLast January, I told you about the great lobster heist where criminals...
Defending the Authentication Flow: Device Code Phishing with Selena Larson
Show NotesThis episode delivers critical battlefield stories regarding the operational reality of modern identity based threats. Selena Larson, Staff Threat...
New Chrome Update Fixes 382 Security Bugs Across Desktop, Mobile
Chrome users have another big security update waiting, and this one is not just routine browser housekeeping. Google has released...
Why a Windows Hello PIN Beats a Password for Enterprise Security
A short PIN looks like a step backward from a complex password. In Windows Hello for Business, it can be...
New BioShocking Attack Tricks AI Browsers Into Leaking Credentials
AI browsers promise to help users get things done faster. BioShocking shows how the same convenience can lead to a...
Microsoft Warns: Fake Perplexity Extension Abused Chrome Search Features
Your Chrome searches may not have been going where you thought. Microsoft has uncovered a malicious Chrome extension masquerading as...
Vect and TeamPCP partner for ransomware campaigns
Counter Threat Unit™ (CTU) researchers investigated two interconnected threat groups known as Vect and TeamPCP. The two groups announced a...
Aflac Data Breach: Over 4M Customers in Japan May Be at Risk
Another cyberattack has put millions of insurance records at risk. Insurance giant Aflac has reported a data breach on its...
Microsoft Uncovers Widespread Hotel Phishing Campaign in Japan
Fake guest complaints are turning into a security trap for hotels in Japan. Microsoft found phishing emails using room complaints...
Meta Adds WhatsApp Usernames: Here’s What You Need to Know
WhatsApp is finally cutting one of the biggest privacy trade-offs baked into its messaging app: having to hand over your...
