No Password, No MFA Prompt, No Person: How Stolen App Secrets Let One Attacker Into 27 Organizations Through Their IT Providers
Here Is How Layered Defenses Help When the Login Isn’t a PersonMost security advice about Microsoft 365 is about people:...

The Switch Was Patched, the Exploit Still Worked: Zyxel GS1900 Owners Need a Second Firmware Update
A Security Tool’s Own Update Turned on Its Customers: About 2,950 Linux Hosting Servers Ran a Data-Stealing Script
Attackers Are Now Hijacking Exposed Node-RED Automation Servers With a Single Web Request
Synology Issues a Rare Ransomware Warning: Outdated NAS Boxes Are Being Encrypted by C3RB3R
Northflank Tells Every Customer to Rotate Secrets After a Breach, and Stolen AI Keys Are Already Being Used