The threat actor ARMORY CASTLE targeted remote support appliances starting in August 2026, using a critical flaw to gain root access and pivot into internal networks.
A joint study by Okta and Yubico finds 43% of security experts use passwords for work due to structural friction and legacy onboarding.
A China-nexus group used a CVSS 9.3 zero-day to dump administrative vaults and pivot into downstream systems starting in August 2026.
Organizations are shifting to phishing-resistant passkeys as attackers use reverse proxies to steal session tokens and bypass traditional MFA in Micro...
EU payment providers face a 2026 deadline to integrate digital identity wallets amid new rules shifting fraud liability from consumers to providers.
Threat actors used stolen sign-in sessions to breach Microsoft 365 accounts, while a new report finds identity systems targeted in 87% of ransomware c...
Threat actors increasingly target session tokens and human behavior to circumvent multi-factor authentication, according to new industry analysis.
6 reports
4 reports
5 reports
1 report
