Threat actor claims millions of employee records stolen from Azure tenants of major enterprises
A seller going by 'TheHatman' is advertising data allegedly pulled from the Microsoft Azure directories…
Month: August 2026
DNS Manipulation on Public Wi-Fi Used to Harvest Credentials
Attackers are compromising routers at hotels and conference venues to redirect users to fake login…
Unisoc VoLTE Exploit Chain Delivers Full Android Kernel Access With No Vendor Fix
A two-stage exploit published by SSD Secure Disclosure achieves kernel-level compromise on Unisoc-powered Android devices…
Microsoft Patch Pending for ShieldBreak Zero-Day in Defender
A publicly disclosed vulnerability in Microsoft Defender is awaiting a fix, leaving organisations to manage…
Alibaba’s Qwen 3 27B Shows What Local AI Can Now Do — and Where Defaults Bite
A capable 17 GB open-weight model raises real questions about AI deployment defaults and the…
China’s GLM-5.3 narrows the gap on AI-assisted vulnerability discovery
Zhipu's new model claims state-of-the-art bug-finding performance, while Indian IT giants TCS and HCL confirm…
New Free Tool Surfaces Hidden Adtech Risks in Apps and Websites
DecryptAds correlates publicly available advertising declaration files to expose data brokers, geo-risk partners, and supply-chain…
Microsoft’s Shared Responsibility Model Leaves a Recovery Gap Organisations Must Close Themselves
Native Microsoft 365 retention tools are not a backup solution, and misunderstanding that distinction is…
Hitachi Energy APM Edge Carries Two Linux Kernel Privilege Escalation Flaws
A pair of 'Dirty Frag' vulnerabilities in the Linux kernel allow any local unprivileged user…
SharePoint Authentication Bypass Under Active Exploitation Following PoC Release
CVE-2026-55040, patched in July 2026 Patch Tuesday, is now being actively targeted after public proof-of-concept…