Identity & access
-
Barracuda targets email attacks after delivery
Barracuda has launched Integrated Email Protection for Microsoft 365 and Google Workspace, combining AI-assisted detection, verdict explanation, quarantine control, and message clawback.
-
Fortinet campaign revives edge credential risk
Fortinet says a credential-harvesting campaign is targeting firewall and VPN devices, exposing how old access data and edge infrastructure remain live enterprise risk.
-
Fortra PAM flaw hits privileged access control
A critical Fortra Core Privileged Access Manager flaw shows how defects inside PAM platforms can weaken controls built to contain administrator risk.
-
Remote support trust breaks at login
A SimpleHelp authentication bypass affecting OIDC deployments shows how weak token validation can turn remote support access into privileged endpoint exposure.
-
Malicious plugins put AI keys at risk
A JetBrains Marketplace campaign shows how developer plugins, AI assistants, and API keys can become part of the software supply chain risk surface.
-
UK social ban tests age assurance
The UK government plans to block major social media platforms from serving under-16s, creating a major compliance and identity challenge.
-
Velvet Ant hid inside Linux authentication
Sygnia says a China-nexus actor maintained long-term access to an isolated network by backdooring Linux PAM and OpenSSH authentication components.
-
Microsoft patch load tests enterprise discipline
NHS England has highlighted Microsoft’s June security updates, including an exploited Defender flaw and critical remote code execution vulnerabilities.
-
Ivanti Sentry flaws expose security gateways
NHS England and CERT-EU have warned organisations to patch critical Ivanti Sentry vulnerabilities after exploitation of one flaw was reported in the wild.
-
Spain arrests suspect over state personnel doxing
Spanish police have arrested a suspect accused of leaking personal data linked to sensitive state institutions, including cyber, police, prosecution, and tax bodies.