Salesforce has urged Experience Cloud customers to audit their website configurations after reports that a notorious threat group has already stolen data from hundreds of companies. The SaaS giant said that it had been tracking an increase in threat actor… Read More "ShinyHunters Targets Hundreds of Websites in New Salesforce Campaign"
Ravie LakshmananMar 10, 2026Vulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerability list is as follows… Read More "CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited"
The rise of the ‘digital employee’ The denominator is expanding again as organizations deploy AI-driven automation and agentic systems that act as virtual workers. These are no longer simple scripts. They perform multi-step tasks across financial systems, data platforms and… Read More "Why access decisions are becoming the weakest link in identity security"
African law enforcers have arrested 574 suspects in a new operation targeting cybercriminals across the continent, according to Interpol. Operation Sentinel ran from October 27 to November 27 and focused on three of the most common cybercrime categories: business email… Read More "Hundreds of Arrests as Operation Sentinel Recovers $3m"
Ravie LakshmananMar 10, 2026Cloud Security / API Security Salesforce has warned of an increase in threat actor activity that’s aimed at exploiting misconfigurations in publicly accessible Experience Cloud sites by making use of a customized version of an open-source tool… Read More "Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool"
More accreditation and compliance requirements have been added in response to cyber incidents. While these frameworks play an important role in establishing security baselines, true security is more than just achieving a perfect compliance score. As I often say, “policies… Read More "I replaced manual pen tests with automation. Here’s what I learned."
A US security agency has warned SolarWinds Web Help Desk users that a remote code execution (RCE) vulnerability patched by the vendor last week is being actively exploited. The US Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-40551 to its… Read More "SolarWinds Web Help Desk Vulnerability Actively Exploited"
Researchers at Pillar Security have found two maximum severity vulnerabilities (CVSS score of 10.0) in n8n, a popular open-source workflow automation platform powering hundreds of thousands of enterprise AI systems worldwide. The flaws are sandbox escape vulnerabilities which, when exploited,… Read More "Two Critical Flaws Found in n8n AI Workflow Automation Platform"
Security filters caught one phishing email every 19 seconds in 2025, more than double the rate a year previously, Cofense has revealed. AI technology is helping threat actors to increase the speed and scale of attacks, to the point where… Read More "AI Drives Doubling of Phishing Attacks in a Year"
bieten im Regelfall agentenlose Konfigurationen, greifen auf Cloud-basierte Modelle zu und belassen Daten auf den vorhandenen Plattformen. Letzteres dient sowohl der Sicherheit als auch dazu, die Verlagerung der damit verbundenen, massiven Datenbestände zu vermeiden. Darüber hinaus spielen bei Security-Tools für… Read More "Security-Tools für KI-Infrastrukturen – ein Kaufratgeber"
