Compromise could expose the identity gateway The implications extend beyond the F5 appliance itself. “An attacker with access to BIG-IP APM can intercept SSO tokens and credentials, inject policy decisions, monitor user traffic, and move laterally to downstream applications and… Read More "Stealth rootkit targeting F5 BIG-IP could expose enterprise identity gateways"
If you’ve been a victim of fraud, you’re likely already a lead on a ‘sucker list’ – and if you’re not careful, your ordeal may be about to get worse. 10 Apr 2026 • , 5 min. read The worst… Read More "Recovery scammers hit you when you’re down: Here’s how to avoid a ‘second strike’"
The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Insider Threat Mitigation Guide with new case studies, statistics and guidance on hybrid and remote work, artificial intelligence and adverse employee separations. The agency published the revision on September 9.… Read More "CISA Updates Insider Threat Guide With New Mitigation Advice"
Google Play’s Early Access program for Android apps allows developers to gather useful feedback from early adopters for app improvement before final release. It lets users try unreleased, in-development apps or games before their official public launch. The conversation is… Read More "Deceptive Android Apps Exploit Google Play Early Access to Evade Reviews"
Cyble has rolled out a significant upgrade to Executive Monitoring inside Cyble Vision, bringing unified findings, AI-driven scoring, and expanded alerting together in a single protection suite. Executive monitoring has historically meant stitching together several things at once. An impersonation… Read More "Cyble’s Executive Monitoring Module Gets An Upgrade Boost"
Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The company says both could allow an unauthenticated remote attacker to run code, but only “under specific conditions” that it has not… Read More "Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE"
A newly identified AI attack technique can let unauthenticated users trigger privileged workflows and access enterprise systems, highlighting a gap in how identity and access controls apply to AI agents, according to research from Noma Labs. The report, authored by… Read More "AI workflows may be creating a dangerous new authorization blind spot"
Some cyber business risks only show up when you take a closer look. Supply chain blind spots are a perfect example. Behind these essential third-party connections, products and services can lurk unseen vulnerabilities that precipitate major cyber incidents – halting… Read More "Supply chain dependencies: Have you checked your blind spot?"
MantaxOtax Android malware has combined file encryption with extensive surveillance, letting attackers steal messages, credentials and device data while restricting access to infected phones. In a technical write up published on September 9, Zimperium’s zLabs team linked the malware to… Read More "MantaxOtax Android Malware Combines Ransomware With Spyware"
September is National Insider Threat Awareness Month, and most of the advice out there is about spotting a person. The insider here is rarely a person. It’s a credential nobody rotated, or an agent nobody kept watching. Each was access… Read More "Left Unsupervised: 10 Times Access Outlived Its Authorization"
