NEWS · INTELLIGENCE
Microsoft Entra ID strengthens protection against script injection
Microsoft announced tighter Content Security Policy controls in Entra ID sign-in flows to restrict untrusted scripts and reduce injection risks.
Read article ↗VALUE360 / INSIGHTS
Ideas, updates and technical insight.
Articles, practical guides and perspectives on IT, cloud and cybersecurity.
NEWS · INTELLIGENCE
EvilTokens: large-scale phishing targeted Microsoft accounts
An international disruption targeted the EvilTokens phishing service, linked to thousands of compromised Microsoft accounts and abuse of device-code flows.
Read article ↗
NEWS · INTELLIGENCE
VMware vCenter critical flaw linked to ransomware exploitation
CISA warned that ransomware groups are exploiting CVE-2026-59310 affecting VMware vCenter, a vulnerability for which a fix had already been released.
Read article ↗
NEWS · INTELLIGENCE
Phishing uses invisible Unicode characters to conceal malicious content
Researchers documented phishing campaigns that conceal content through invisible Unicode characters to evade parts of email security filtering.
Read article ↗
NEWS · INTELLIGENCE
Ubiquiti patches multiple maximum-severity security flaws
Ubiquiti released updates addressing three maximum-severity vulnerabilities in its product ecosystem, including UniFi OS and UniFi Protect.
Read article ↗
NEWS · INTELLIGENCE
WordPress critical flaw chain abused to plant webshells
Reports of active exploitation of the wp2shell chain describe deployment of malicious plugins and webshells against vulnerable WordPress installations.
Read article ↗NEWS · INTELLIGENCE
Entra ID passkeys: planning phishing-resistant authentication
Microsoft outlined a shift toward passkeys as a default Entra ID authentication method and a roadmap away from built-in phone-based authentication.
Read article ↗
NEWS · INTELLIGENCE
FortiSandbox: multiple critical flaws reported exploited
Security researchers reported exploitation activity targeting critical FortiSandbox vulnerabilities, prompting urgent patch review.
Read article ↗
NEWS · INTELLIGENCE
IronWorm supply-chain attack spreads through compromised npm packages
The IronWorm campaign affected dozens of npm packages and targeted developer credentials, tokens and environment secrets.
Read article ↗