Weak identity checks during onboarding can undermine later Zero Trust controls. The article cites fraudulent North Korean IT worker schemes and recommends verifying identity before issuing credentials or access.
Operation KillSwitch seized KillSec’s leak site and five servers, including infrastructure used to store stolen data, and led to three provisional arrests. Authorities identified a 16-year-old as the group’s suspected main operator.
Microsoft’s 2026 Digital Defense Report says attackers are using AI to accelerate vulnerability discovery, malware development, and post-compromise activity, while defenders struggle to patch vulnerabilities quickly enough.
Researchers found AI agents made large volumes of requests and attempted basic vulnerability probes against U.S. and Canadian government websites while seeking public data. Officials found no evidence of compromise, and attribution remains uncertain.
Fortinet says attackers are exploiting a critical FortiMail flaw to write arbitrary files and execute commands. Updates are pending for several versions; admins should apply workarounds, and CISA has added the flaw to its Known Exploited Vulnerabilities catalog.
Citrix confirmed active exploitation of two critical NetScaler RCE flaws and released updates for affected ADC and Gateway appliances. Administrators should upgrade promptly or reduce internet exposure until they can patch.
A flaw in Cloudflare Containers could let Workers Paid customers recover residual data from other customers’ containers on the same host. Cloudflare fixed the issue and found no evidence of customer data exposure.
Anthropic has launched Claude Marketplace, offering more than 2,000 plugins and connectors, partner-built Claude products, and consulting services. Developers can publish connectors and plugins using MCP and Agent Skills.
Kiteworks advised customers worldwide to take servers offline for six hours after receiving law-enforcement threat intelligence about a potentially imminent attack. The company says the warning is precautionary and no compromise is known.
Ardit Kutleshi pleaded guilty to aggravated identity theft and money laundering conspiracy for his role in Rydox, a marketplace for stolen personal data, credentials, payment card details, and cybercrime tools.