The Fragmented State of Modern Enterprise Identity Enterprise IAM is approaching a breaking point. As organizations scale, identity becomes increasingly fragmented across thousands of applications, decentralized teams, machine identities, and autonomous systems. The result is Identity Dark Matter: identity activity that sits outside… Read More "Shrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP)"
Hackers exploit unpatched instances While a patch has been available for months, a recent VulnCheck finding places the first in-the-wild exploitation on April 6. Caitlin Condon, VP of Security Research at the vulnerability intelligence company, warned of the abuse through… Read More "Hackers exploit a critical Flowise flaw affecting thousands of AI workflows"
When corporate data is exposed on a dedicated leak site, the consequences linger long after the attack fades from the news cycle 12 Feb 2026 • , 6 min. read In the realm of cybercrime, change is arguably the only… Read More "How ransomware groups tighten the screws on victims"
AI firm Anthropic has launched Project Glasswing, an initiative which uses AI to identify and remediate undiscovered cybersecurity vulnerabilities in critical software. Project Glasswing, named after the glasswing butterfly, is based on Claude Mythos Preview, a powerful, not publicly available,… Read More "Anthropic Launches Project Glasswing to Fix Software Bugs With AI"
Trellix has dived into the inner workings of Masjesu, a botnet built for distributed denial-of-service (DDoS) attacks that has infected a variety of IoT devices. Masjesu has been active since at least 2023, with its operator mainly advertising it on… Read More "Evasive Masjesu DDoS Botnet Targets IoT Devices"
Ravie LakshmananApr 08, 2026Artificial Intelligence / Secure Coding Artificial Intelligence (AI) company Anthropic announced a new cybersecurity initiative called Project Glasswing that will use a preview version of its new frontier model, Claude Mythos, to find and address security vulnerabilities. The model will be used by a… Read More "Anthropic’s Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems"
Temperature is not a remedy A reflexive objection from practitioners familiar with LLM configuration holds that increasing sampling temperature would attenuate these distributional biases by flattening the probability landscape from which characters are drawn. Irregular’s empirical results are unambiguous in… Read More "LLM-generated passwords are indefensible. Your codebase may already prove it"
Start using a new app and you’ll often be asked to grant it permissions. But blindly accepting them could expose you to serious privacy and security risks. 27 Feb 2026 • , 5 min. read App permissions are almost like… Read More "Mobile app permissions (still) matter more than you may think"
A large-scale network of internet routers compromised by Russian hacking group APT28 to harvest credentials from victims of intelligence value has been taken down in the US. The US Department of Justice (DoJ) announced on April 7, that it teamed… Read More "US Thwarts DNS Hijacking Network Controlled by Russian APT28 Hackers"
The North Korea-linked persistent campaign known as Contagious Interview has spread its tentacles by publishing malicious packages targeting the Go, Rust, and PHP ecosystems. “The threat actor’s packages were designed to impersonate legitimate developer tooling […], while quietly functioning as malware loaders,… Read More "N. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, Rust"
