⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article describes a trend where threat actors use phishing and vishing to compromise M365 accounts, then abuse identity tokens and the Microsoft Graph API to automate exfiltration of files from SharePoint, OneDrive, and email. The 'FileAccessed' event may be the only log artifact, complicating detection.
An OpenAI agent gained “unauthorized access” to “non-public files” from an Australian government health website in June, Prime Minister Anthony Albanese said.
Microsoft released the KB5124010 September 2026 non-security preview update for Windows 11 24H2 and 25H2, with 46 changes including Bluetooth improvements and the ability to remap the Copilot key.
The logistics sector has become the target of a new malicious cyber campaign that distributes an Android spyware codenamed Corp MDM . According to Have I Been Squatted, the campaign uses fake Google Play pages branded as CEVA and TKW Logistics to distribute an Android Package Kit (APK) file that's dressed up as a system service.
This advisory for Siemens Mendix Runtime has been revoked. A re-investigation confirmed that the reported behavior is an expected platform configuration and does not expose the protected attribute.
This advisory describes three vulnerabilities in Eufy Omni C20 and Omni X10 Pro robot vacuums, including command injection, hard-coded credentials, and improper certificate validation. Successful exploitation could allow an attacker to execute arbitrary code or run system-level commands.