Ken Underhill

The Pentagon bans China-based staff from cloud work after reports warn of espionage risks and urge tighter supply chain security.

A flaw in Entra ID let attackers seize Microsoft tenants; learn how the patch and best practices protect cloud identity.

A Microsoft fix introduced CVE-2025-53136, leaking kernel addresses in Windows 11/Server 2022. Learn risks and how to stay protected.

A fake Chrome tool, Madgicx Plus, steals Meta ad credentials, hijacking budgets and accounts via stealthy browser exploits.

Palo Alto’s CVE-2025-4235 leaks service passwords, demanding urgent patching and resets.

Anthropic’s new Claude file tool boosts productivity but exposes users to prompt injection attacks and potential data leaks.

PTaaS delivers continuous, proactive security that keeps pace with real threats.

Hackers hijacked 18 npm packages with 2B weekly downloads, planting malware to steal crypto by redirecting wallet transactions.

Hackers abuse Amazon SES to send 50K+ phishing emails daily, spoofing domains and evading detection.

Attackers use raw disk reads to evade EDR and steal Windows credential files, exposing a major blind spot in enterprise defenses.

A new PayPal phishing scam adds attackers as secondary users, letting them drain accounts while evading traditional detection.

A WhatsApp zero-click flaw exploited in spyware attacks has been patched on iOS and macOS. Update now to protect your devices.