The attackers behind the nx attack have struck again, targeting a large amount of packages, with a first-of-its-kind worm payload.   #attack   #supply-chain

Learn how the Shai-Hulud npm worm compromised 100+ packages with data-stealing malware. See how it spreads, the risks, and steps to detect and mitigate.   #attack   #supply-chain   #defend   #monitor

An attacker installed Huntress onto their operating machine, giving them a detailed look at how they're using AI to build workflows, searching for tools like Evilginx, and researching targets like software development companies.   #ai   #attack   #defend

This article details a critical vulnerability discovered in Entra ID that allowed full tenant compromise through undocumented Actor tokens and a flaw in Azure AD Graph API's tenant validation. Microsoft patched it under CVE-2025-55241.   #azure   #attack   #iam

Chainguard found a vulnerability in GitHub Actions that bypasses allowed Workflow settings by using commits from forked repositories.   #attack   #ci/cd   #supply-chain

This article explores Kubernetes post-exploitation techniques, demonstrating how attackers can maintain cluster access through debug profiles, container runtimes, static manifests, Tailscale for remote access, and credential generation via CSR/Token Request APIs.   #attack   #kubernetes

This article details how attackers exploit Entra ID through OAuth consent injection and app backdooring, covering attack flows, MITRE ATT&CK mappings, detection strategies, and prevention methods for securing consent flows.   #attack   #azure

This paper compares the threat models of machine identities managed by the Cloud Service Providers (CSP-managed) across the three major cloud service providers, with a focus on the risks associated with impersonation and usage.   #iam   #explain   #azure   #aws   #gcp

Okta Threat Intelligence has published a detailed analysis on a previously unreported Phishing-as-a-Service (PhaaS) operation, which its authors name VoidProxy.   #attack   #defend   #saas

A curated directory of MCP servers.

Kingfisher is a blazingly fast tool for secret detection and live validation across files, Git repos, S3, Docker images, Jira, Slack, and Confluence.

An automated recon tool for asset discovery and vulnerability scanning using open-source tools. Supports XSS, SQLi, LFI, RCE, IIS, Open Redirect, Swagger UI, .git exposures and more.

Group Policy Objects manipulation and exploitation framework.

An MCP server that lets AI agents autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research.

The new Multi-Region key replication feature in Payment Cryptography enhances automatic key replication capabilities, providing improved resilience and simplified management for global payment applications.

Post exploring the different suite of protection plans and the Extended Threat Detection feature of GuardDuty.

Elastic Load Balancing simplifies authentication by offloading it to OpenID Connect (OIDC) compatible identity providers (IdPs). This lets builders focus on application logic while using robust identity management.