Iran targets M365 accounts with password-spraying attacks Summary Researchers at Check Point have identified a series of password-spraying campaigns linked to Iran-focused threat actors that targeted Microsoft 365 accounts across…
Don’t open that WhatsApp message, Microsoft warns Summary Microsoft has flagged an ongoing multi-stage campaign that begins with malicious WhatsApp messages delivering Visual Basic Script (VBS) files. Once a recipient…
What Is Post Merger Integration (PMI)? | CIO Portal | CIO Portal Author style Punchy: A pragmatic, no-nonsense guide for leaders and practitioners. If you’re involved in M&A or responsible…
Google links axios supply chain attack to North Korean group Summary Google Threat Intelligence Group (GTIG) and other researchers have attributed a recent supply chain compromise of the hugely popular…
TeamPCP Breaches Cloud, SaaS Instances With Stolen Credentials Summary TeamPCP weaponised supply-chain compromises of open-source projects (Trivy, KICS, LiteLLM and Telnyx) to deploy infostealer malware and harvest credentials, API keys,…
Google’s Vertex AI Has an Over-Privileged Problem Summary Palo Alto Networks researchers discovered that Google Cloud’s Vertex AI deploys agents with a default service account (Per-Project, Per-Product Service Agent —…
Axios NPM Package Compromised in Precision Attack Summary The popular Axios JavaScript NPM package was briefly compromised when malicious versions (axios@1.14.1 and axios@0.30.4) were published after a maintainer account was…
Oracle cuts jobs across sales, engineering, security Summary Oracle carried out mass layoffs on Tuesday, notifying affected staff by email and asking for personal contact details for follow-up. Reports and…
UK watchdog targets Microsoft licensing in cloud competition probe Summary The UK Competition and Markets Authority (CMA) has launched a strategic market status (SMS) investigation into Microsoft’s business software ecosystem…
Anthropic goes nude, exposes Claude Code source by accident Summary Anthropic accidentally published the apparent full source for Claude Code by shipping a source map in an npm package that…
