Meta has integrated face recognition capabilities into its smart glasses platform, triggering widespread privacy concerns and regulatory scrutiny. The technology, embedded within the glasses’ firmware, can identify individuals in real-time without their knowledge or consent. While Meta claims the fe
Oracle E-Business Suite (EBS) is under active attack through CVE-2026-46817, a critical authentication bypass vulnerability with a CVSS score of 9.8. Attackers are exploiting unpatched instances to gain unauthorized administrative access, potentially compromising sensitive financial and business dat
Six critical vulnerabilities collectively dubbed “Proto6” have been discovered in protobuf.js, a widely-used JavaScript implementation of Google’s Protocol Buffers. These flaws expose Node.js applications to remote code execution (RCE) and denial-of-service (DoS) attacks. The vulnerabilities stem fr
Security researchers have discovered critical remote code execution (RCE) vulnerabilities in Cursor IDE, a popular AI-powered code editor. These flaws enable attackers to execute arbitrary code through zero-click prompt injection attacks, potentially compromising developer workstations without any u
Identity verification has become the cornerstone of digital security, yet many organizations still struggle with implementation. This article outlines five critical best practices: implementing multi-layered authentication, leveraging biometric technologies securely, maintaining continuous verificat
A sophisticated Adversary-in-the-Middle (AiTM) phishing kit targeting AWS Management Console users has been discovered in active campaigns. The kit intercepts authentication sessions in real time, capturing usernames, passwords, and multi-factor authentication (MFA) codes to hijack AWS accounts even
CVE-2024-40766 has been patched by vendors, but organizations remain vulnerable due to insecure default configurations and legacy settings that persist post-patch. This vulnerability highlights a critical gap in security hygiene: patches address code flaws, but misconfigured systems continue exposin
PyrsistenceSniper is a newly released open-source detection tool capable of identifying 117 different malware persistence mechanisms across Windows, Linux, and macOS platforms. This cross-platform scanner helps security teams identify how threat actors maintain long-term access to compromised system
A telecommunications company has been found granting new employees sudo-level administrative access to production databases containing unencrypted customer personally identifiable information (PII). This egregious security failure violates fundamental access control principles, exposing millions of
South Korean e-commerce giant Coupang has been slapped with a record-breaking $409 million fine by Korea’s Personal Information Protection Commission (PIPC) for a massive data breach that exposed sensitive customer information. This penalty marks the largest ever issued under South Korea’s Personal