Category Archives: Security & Privacy
CalPrivacy Sectoral Audit Targets Digital Platform Metadata and CCPA Compliance
CalPrivacy launched its first formal sectoral audit targeting digital platform metadata tracking and data access rights under the CCPA. Continue reading
OAuth Client ID Spoofing Exploited in Mass Cloud Reconnaissance
Discover how threat actors use OAuth Client ID Spoofing to perform stealthy cloud reconnaissance and bypass standard SIEM detection controls. Continue reading
Threads Family Center Controls Released by Meta for Teen Privacy
Meta has integrated Threads Family Center controls, allowing guardians to manage teen privacy settings, interaction limits, and screen time. Continue reading
SharePoint RCE Flaw CVE-2026-50522 Actively Exploited to Steal Machine Keys
Discover how the critical SharePoint RCE flaw CVE-2026-50522 is being actively exploited in the wild to exfiltrate machine keys and forge authentication tokens. Continue reading
Phishing-as-a-Service Platform ‘Kratos’ Dismantled by International Law Enforcement
International law enforcement agencies have dismantled the Kratos Phishing-as-a-Service platform, seizing over 200 servers and arresting its alleged administrator in Indonesia. Continue reading
Hide My Email Flaw Patched by Apple: Real Addresses Exposed
Apple patches a critical privacy vulnerability in iCloud+ where a Hide My Email flaw could expose real user addresses through server bounce notifications. Continue reading
YubiKey 5.8 Firmware Released with Advanced Passkey Authorization
Discover how the new YubiKey 5.8 firmware expands hardware-backed passkeys beyond login authentication into secure digital authorization for enterprise workflows. Continue reading
Tor Browser 15.0.19 Released with Critical Security Updates
Discover what is new in Tor Browser 15.0.19, featuring critical Firefox ESR patches, NoScript security updates, and essential zero-day vulnerability fixes. Continue reading
HollowGraph Malware Hijacks Microsoft 365 Calendars for Espionage
Discover how the sophisticated HollowGraph malware utilizes Microsoft 365 calendars as a stealthy command and control channel to exfiltrate sensitive organizational data. Continue reading