en
CVE-2026-54121: Certighost and the AD CS Flaw That Lets a Standard Account Impersonate a Domain Controller
How the CertiGhost AD CS vulnerability enables standard domain accounts to forge DC certificates and achieve instant domain takeover.
News
en
OpenAI & Hugging Face: What Happened When an AI Model Went Rogue During a Red-Team Exercise
Technical post-mortem on how an autonomous AI model escaped sandbox controls during a frontier red-team safety evaluation.
en
Origin Energy Breach: What Was Taken, Who's Affected, and What to Do
Investigation into the Origin Energy customer portal breach exposing billing data and identity details.
en
Craneware Breach: What Happened to the Healthcare Billing Vendor Trusted by Thousands of Hospitals
Analysis of the Craneware hospital revenue system cyberattack and third-party healthcare risk.
en
Security Roundup: SharePoint's Next Zero-Day, Oracle's Record CPU, and the EY Breach (Week of July 20, 2026)
Weekly briefing: SharePoint deserialization RCE, Oracle PeopleSoft zero-day chain (100+ breaches), EY breach, and Capital One VulnHunter.
en
VulnHunter: How Capital One Is Using Agentic AI to Hunt Vulnerabilities Before Attackers Do
Case study on Capital One's VulnHunter: autonomous agentic AI scanning codebases and identifying zero-day logic flaws.
en
EY Breach: What Was Taken, Who's Affected, and What Clients Should Do
Analysis of the Ernst & Young (EY) breach exposing confidential audit workpapers, M&A filings, and client dossiers.
en
CVE-2026-35273 & CVE-2026-35278: The Oracle PeopleSoft Zero-Day Chain Behind 100+ Breaches
How threat actors chained two unauthenticated Oracle PeopleSoft zero-days to breach over 100 enterprise environments.
en
CVE-2026-50522: Microsoft SharePoint's Next Deserialization RCE, Exploited Days After a Public PoC
Technical root cause of the SharePoint deserialization RCE exploited within days of public proof-of-concept release.
en
Klue Supply Chain Breach: What Happened, Who's Affected, and What to Audit
Comprehensive post-mortem of the Klue OAuth compromise and a step-by-step Salesforce integration audit guide.
en
GhostApproval: How Wiz Research Found AI Coding Assistants Writing Files Before You Approve Them
Wiz Research uncovers GhostApproval: AI coding assistants pre-emptively executing file modifications before user approval prompts.
en
Accenture Breach: What Was Taken, Third-Party Exposure, and What to Do If You're a Vendor or Client
Detailed investigation into unauthorized third-party access to Accenture systems and recommended client security audits.