Canvas Breach Highlights SaaS Security Risks
The Canvas breach exposed 3.65 terabytes of data from 275 million users, highlighting the need for robust SaaS security and identity governance.
Attackers exploit identity verification processes, particularly during onboarding and account recovery, to gain unauthorized access to corporate systems.
The Canvas breach exposed 3.65 terabytes of data from 275 million users, highlighting the need for robust SaaS security and identity governance.
Microsoft is testing a resizable taskbar and customizable Start menu in the latest Windows 11 Insider Preview Build 26300.8493.
The Tycoon2FA phishing kit has added device-code phishing attacks to hijack Microsoft 365 accounts, with a surge in such attacks reported by Push Security and Proofpoint.
Microsoft Edge will no longer load saved passwords into memory on startup, following a security researcher's disclosure of the browser's behavior.
Microsoft and other major software vendors released a record volume of security patches this month, addressing over 1,000 vulnerabilities, with 118 fixes from Microsoft alone.
Foxconn, a major electronics manufacturer, is recovering from a cyberattack that disrupted its North American factories, with the Nitrogen ransomware group claiming responsibility and stealing 8 terabytes of data.
A max-severity zero-day vulnerability in Cisco Catalyst SD-WAN Controller and Manager is being exploited by a persistent threat group, with a CVSS rating of 10 and potential for high-impact operations.
Microsoft rejected a critical Azure vulnerability report, claiming the issue was expected behavior, despite the researcher documenting a silent patch.
TeamPCP has released the source code of its Shai-Hulud worm, potentially fueling more supply chain attacks and copycat threats.