IAM / Zero Trust
MokN Raises $15 Million for Phish-Back Platform
MokN's platform deploys realistic decoy access points to lure attackers into revealing compromised credentials, enabling organizations to respond before abuse...
In Other News: Trump Mobile Data Breach, FIFA World Cup Phishing, CISA Responds to Supply Chain Atta
Noteworthy stories that might have slipped under the radar: Trump Mobile exposes customer data, phishers target the 2026 FIFA World...
IAM / ZERO TRUST
CISA Exposes Secrets, Credentials in ‚Private‘ Repo
The agency's GitHub repository, publicly available since November 2025, was ironically named "Private-CISA."...
Google Chrome adds session cookie theft protection for all users
Google says the Chrome Device Bound Session Credentials (DBSC) security feature is now generally available and is rolling out to...
Carnival Data Breach Exposed 6 Million People
Data breach leaves nearly 6 million Carnival customers navigating identity theft risks. The post Carnival Data Breach Exposed 6 Million...
IAM / ZERO TRUST
CISA Exposes Secrets, Credentials in ‚Private‘ Repo
The agency's GitHub repository, publicly available since November 2025, was ironically named "Private-CISA."...
IAM / ZERO TRUST
CISA Exposes Secrets, Credentials in ‚Private‘ Repo
The agency's GitHub repository, publicly available since November 2025, was ironically named "Private-CISA."...
IAM / ZERO TRUST
Gitea Vulnerability Exposes Private Container Images without Authentication
Cybersecurity researchers have disclosed a security flaw in Gitea, an open-source, self-hosted platform for version control, that allows unauthenticated remote...
IAM / ZERO TRUST
Iranian Hackers Deploy MiniFast and MiniJunk V2 via Phishing and SEO Poisoning
The Iranian state-sponsored threat actor known as Nimbus Manticore (aka Screening Serpens and UNC1549) has been attributed to a fresh...
IAM / ZERO TRUST
MFA Prompt Bombing: Why Your Second Factor Isn’t Saving You
Multi-factor authentication (MFA) was supposed to close a critical gap in identity security. It meant that, even if an attacker...