TechLogHub Blog — Page 7 of 25
Insights, guides, and product strategy for builders and product teams.
Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way
AI agents are emerging as real identities within enterprises, connecting to critical apps and data and often operating with broad, poorly governed access. Traditional IAM struggles to keep pace as agents create, use, and rotate credentials at machine speed, leading to high-risk exposure and governance gaps. A 2026 C…
Webinar: How Attackers Bypass MFA and How Defenders Can Respond
Upcoming live webinar on July 8, 2026, hosted by BleepingComputer, explores how attackers bypass MFA—especially through Device Code phishing that leverages legitimate Microsoft login flows—within phishing, BEC, and account takeover attacks, and how defenders can use behavioral AI to detect unusual activity, automate…
Microsoft: June 2026 Windows updates break Recycle Bin prompts
Microsoft confirms a bug in the June 2026 Windows updates where the Recycle Bin’s delete confirmation shows internal filenames (e.g., $Rxxxxx.ext) instead of the original names for permanently deleted items; the Recycle Bin and restore still display the original name. The issue affects all supported Windows client a…
CISA: Splunk Enterprise flaw actively exploited, patch by Sunday
US CISA orders federal agencies to patch actively exploited Splunk Enterprise flaw CVE-2026-20253 by Sunday. The vulnerability affects versions 10.2.0–10.2.3 and 10.0.0–10.0.6 and allows unauthenticated remote file operations via a PostgreSQL sidecar endpoint. Splunk issued patches in mid-June amid in-the-wild explo…
NY man charged after harassing college student with AI-generated nudes
A New York man, Anthony Belford, was indicted on a federal cyberstalking charge for targeting a Georgia college student with an online harassment campaign that used AI-generated nude images and racist messages from spoofed social media profiles. Prosecutors say Belford created fake accounts across Instagram, LinkedI…
CISA warns Fortinet users to secure devices after FortiBleed leak
CISA has urged Fortinet customers to harden devices after the FortiBleed leak exposed credentials for about 74,000 Fortinet devices worldwide, including firewalls and VPN gateways used by major corporations and government entities. The breach appears to involve a Russian-speaking threat group that conducted roughly …
Gentlemen ransomware's GentleKiller: 8 BYOVD EDR killers targeting 48 security products
ESET found Gentlemen RaaS gives affiliates GentleKiller, 8+ BYOVD variants that kill 400+ processes from 48 security products. What to block and monitor.
Nintendo confirms data stolen in WebMD subsidiary cyberattack
Nintendo of America confirms that data from TinyPulse, a WebMD subsidiary used for internal employee surveys, was stolen in a cyberattack, but its systems and customer data were not compromised. Shadowbyt3$ claims to have stolen about 1GB of data and is demanding a $2 million ransom; Nintendo says the breach affecte…
USB Worm Spreads Crypto-Stealing Malware via Windows Shortcut Files
A USB worm campaign uses Windows LNK shortcut files on infected USB drives to self-spread and drop clipboard-stealing crypto malware. The malware monitors the clipboard for seed phrases, private keys, and wallet addresses across multiple blockchains and replaces them with attacker-controlled values; it also captures…
Klue OAuth Breach Linked to Icarus Salesforce Data Theft Attacks
Klue’s OAuth-based Battlecards integration was exploited by the Icarus extortion group to steal Salesforce CRM data from multiple organizations. Attackers used compromised OAuth tokens to query Salesforce APIs after initial reconnaissance, exfiltrating data over several hours before Salesforce disabled the Klue inte…
5 reasons Microsoft 365 backup isn’t enough for business data protection
A sponsored post by Andy Kerr of Acronis arguing that Microsoft 365 alone does not fully protect business data. It explains the shared-responsibility model and outlines five reasons why 365 backup isn’t enough: (1) ransomware and malicious data loss, (2) retention policies that fall short for compliance, (3) granula…
Police Clean Nearly 15,000 SocGholish-Infected Sites Tied to Evil Corp
Under Operation Endgame, international law enforcement cleaned 14,971 WordPress sites infected by the SocGholish downloader and took 106 servers and domains offline, in a coordinated action by the Netherlands NHCTU, Canada’s RCMP, the US FBI, and Germany’s BKA with Europol/Eurojust support. The operation targets Evi…
FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices
Fortinet’s FortiGate VPN credentials for about 73,932 firewall URLs across 194 countries were exposed in a data leak dubbed “FortiBleed.” Investigators say the data may come from Fortinet configurations and implicates a Russian-speaking multi-operator group that allegedly conducted billions of credential attempts ag…
Why Account Takeovers Are Rising and How to Stop Them
Account takeover attacks are rising as organizations wrestle with managing identities across cloud services, endpoints, and BYOD devices. Attackers leverage credential theft, phishing (including through legitimate services), and MFA fatigue to bypass protections, with credential abuse tied to a significant share of …
India's Telegram Ban Reaches the UAE: How to Bypass the Block with MTProto Proxy
India has ordered a nationwide Telegram ban until June 22 after investigators say the platform was used to sell leaked NEET exam materials; Telegram claims the move is punishing users and alleges a BGP hijack by Reliance extended the block to the UAE. Experts say the routing disruption is real but the intent is uncl…
Microsoft confirms Office apps launch issues after June updates
Microsoft is investigating reports that post-June 9, 2026 Windows updates prevent certain third‑party apps from launching Microsoft Office programs or opening Office documents. The issue, affecting Word, Excel, PowerPoint, Access and others that use OLE automation, has been observed with apps such as CCH Engagement,…
CISA orders feds to patch max severity Joomla plugin flaw by Friday
CISA has ordered federal agencies to patch a maximum-severity vulnerability in the Widget Factory Joomla Content Editor (JCE) plugin, CVE-2026-48907, which is being actively exploited to achieve remote code execution via unauthenticated editor-profile creation. The issue requires updating to JCE Pro 2.9.99.6 or late…
Malicious JetBrains Marketplace Plugins Steal AI API Keys from Developers
Security researchers from Aikido Security warn of a coordinated campaign on the JetBrains Marketplace in which at least 15 malicious plugins—published under seven vendor accounts—steal AI provider API keys entered into their settings. These plugins, advertised as AI coding assistants, code-review tools, and Git util…
.jpg&w=3840&q=75)
New Rokarolla Android malware targets 217 banking, crypto apps
Security researchers have uncovered Rokarolla, a new Android banking trojan that targets 217 banking and cryptocurrency apps. Distributed via fake Chrome or TikTok installers, it acts as a dropper and masquerades as Google Play Protect to gain elevated privileges. Once on a device, Rokarolla uses overlays to steal l…
iRhythm breach: social engineering hit third-party SaaS apps; 360,000+ patients notified
Cardiac-monitor maker iRhythm says attackers used social engineering to steal patient data from third-party SaaS apps in June 2026, then demanded a ransom.
Showing 20 of 485 articles