A systematic methodology for testing AI systems at scale
Weekly insights on threats, vulnerabilities, and security best practices.
Threat actors weaponize OAuth 2.0 Device Authorization flow with vishing campaigns to compromise Microsoft Entra accounts across technology, manufacturing, and financial sectors.
CRESCENTHARVEST campaign deploys custom RAT malware against Iran protest supporters, demonstrating advanced surveillance TTPs for long-term information theft and monitoring operations.
UNC6201 threat actors exploited CVE-2026-22769, a CVSS 10.0 hard-coded credential vulnerability in Dell RecoverPoint for VMs, demonstrating sophisticated attack chains targeting enterprise backup infrastructure.
