A critical zero-day vulnerability dubbed “RoguePlanet” in Microsoft Defender allows attackers with basic user access to escalate privileges to SYSTEM-level control on Windows machines. The flaw exploits Defender’s built-in scanning mechanisms through a time-of-check-time-of-use (TOCTOU) race conditi
Threat actors are increasingly targeting cloud logging infrastructure as a primary defense evasion technique. By disabling, deleting, or manipulating cloud audit logs across AWS CloudTrail, Azure Monitor, and Google Cloud Logging, attackers effectively blind security teams during intrusions. This ta
Meta has updated its data usage policies to expand how it leverages off-Meta business activity data beyond advertising purposes. The social media giant will now use information about user interactions with third-party businesses—collected through Meta Pixel, Conversions API, and similar tools—to per
Microsoft’s June 2026 Patch Tuesday addresses 89 security vulnerabilities across its product ecosystem, including five zero-day vulnerabilities—three actively exploited in the wild. The most critical issues affect Windows Kernel, Microsoft Exchange Server, and Azure Cloud Services. Organizations sho
ServiceNow, a major cloud-based workflow automation platform used by thousands of enterprises, disclosed a security incident that exposed customer data through a misconfigured development instance. The breach, discovered in early 2024, affected an undisclosed number of customers and involved unautho
Recent testing has confirmed that Russian satellites possess the capability to jam GPS signals across entire continents, representing a significant escalation in electronic warfare capabilities. This space-based jamming threatens critical infrastructure, aviation, maritime navigation, financial syst
A critical bug in Microsoft 365’s cloud infrastructure inadvertently bypassed Windows driver auto-update controls, triggering widespread service degradation across enterprise environments. The vulnerability allowed unauthorized driver updates to push through despite administrator-configured update p
Elon Musk’s X Corp (formerly Twitter) has intensified efforts to terminate Federal Trade Commission privacy audits mandated by a 2011 consent decree. The company argues the audits are overly burdensome and politically motivated, while the FTC maintains they’re necessary to verify compliance with dat
Microsoft has introduced native Unix coreutils to Windows, marking a significant shift in the operating system’s architecture. While this integration enhances developer productivity and cross-platform compatibility, it introduces new attack surfaces, permission model complexities, and potential secu
Cybercriminals are intensifying automated scanning campaigns targeting publicly accessible Swagger API documentation files, particularly swagger.json. These files inadvertently expose complete API endpoints, authentication mechanisms, and internal architecture details that attackers exploit to breac