Steve Zurier

Iran-linked Handala claimed it compromised the California Water Service (Cal Water), publishing a 5-gigabyte proof-of-concept data dump that Dataminr

Until the past couple of years, identity and access management (IAM) programs were built around employees, admins, joiners, movers, leavers, multi-factor authentication (MFA), and access reviews.

Palo Alto Networks Unit 42 reported active exploitation of a 7.8 CVSS PAN-OS Global Protect bypass bug that was added to the Known Exploited

Three critical Fortinet FortiSandbox bugs were exploited in the wild, according to cybersecurity researchers at Dufused Cyber.

DragonForce ransomware abused Microsoft Teams relay infrastructure to hide C2 traffic.

F5 on June 17 released out-of-band security patches to address multiple NGINX web server vulnerabilities, two of them critical.

Active exploitation of FortiSandbox flaws prompt urgent patching calls from security experts.

Unit 42 says exploited PAN-OS GlobalProtect flaw remains a VPN risk despite patches.

Security teams have to get that NHIs are not just a static secret in a vault, they active participants in the business.

Experts say that Handala has a history of overstating its capabilities and in this case the water systems was not disrupted.