IAM / Zero Trust
IAM / ZERO TRUST
‚FrostyNeighbor‘ APT Carefully Targets Govt Orgs in Poland, Ukraine
Attackers uniquely fingerprint victims before delivering spear-phishing payloads aimed at espionage, in the latest campaign from the Belarussian nation-state threat...
IAM / ZERO TRUST
CISA Exposes Secrets, Credentials in ‚Private‘ Repo
The agency's GitHub repository, publicly available since November 2025, was ironically named "Private-CISA."...
IAM / ZERO TRUST
Cyber Pioneers Ponder Past as Prologue
Robert "RSnake" Hansen, Katie Moussouris, Rich Mogull, Richard Stiennon, and Bruce Schneier reflect on how their favorite columns penned for...
IAM / ZERO TRUST
CISA Exposes Secrets, Credentials in ‚Private‘ Repo
The agency's GitHub repository, publicly available since November 2025, was ironically named "Private-CISA."...
IAM / ZERO TRUST
Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer
Cybersecurity researchers have flagged a compromised version of the Nx Console extension that was published to the Microsoft Visual Studio...
IAM / ZERO TRUST
Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer
Cybersecurity researchers have flagged a fresh software supply chain attack campaign that has targeted multiple PHP packages belonging to Laravel-Lang...
IAM / ZERO TRUST
The New Phishing Click: How OAuth Consent Bypasses MFA
In February 2026, a phishing-as-a-service (PhaaS) platform called EvilTokens went live. Within five weeks, it had compromised more than 340...
IAM / ZERO TRUST
Agent AI is Coming. Are You Ready?
New Industry Data Just Released Suggests Not. On May 19th, 2026, Orchid Security released the results of our Identity Gap:...
IAM / ZERO TRUST
CISA Exposes Secrets, Credentials in ‚Private‘ Repo
The agency's GitHub repository, publicly available since November 2025, was ironically named "Private-CISA."...
IAM / ZERO TRUST
Inside a Crypto Drainer: How to Spot it Before it Empties Your Wallet
Modern crypto drainers don't hack wallets. They trick users into approving malicious transactions. Flare explores how the Lucifer DaaS platform...