Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites ...

Rapuncel infostealer campaign stole browser passwords and crypto wallet data from Windows users after a Microsoft-signed kernel driver killed 145 antivirus and EDR tools -- the same driver that scored ...

Introduction to Modern SSO Challenges Isn't it annoying how many passwords we need these days? Single Sign-On (SSO) was supposed to fix that, but sometimes it feels like it just moved the problem ...

The downtime was just too interesting.I can't find any words other than 'amazing'.31 is a prime number, but apparently it was a number you shouldn't choose—The story of building a feature that suggest ...

It's the final day of summer as we welcome fall tomorrow! We’re starting the week on the cooler side across the valley, with ...

Today's Growth Research (as of 2026/9/21): 2,000 people read it, and not a single one took action. Stories about the "number ...

An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by ...

Accessibility landed on your desk. Maybe it came from a customer complaint, or maybe your legal team forwarded a demand ...

The Borderland will see a relatively quiet start to the week before a significant increase in moisture brings several days of widespread rain and thunderstorms from Tuesday through Thursday. A weak ...

Ransomware developer sentenced to prison on Switzerland, Plugin4Shell attack targets AI coders, organizations warned of SAP flaw.

A plan to buy a property of a former animal hospital will be introduced at the next Columbia City Council meeting. The city and Boone County will propose to buy the former site of Columbia Animal ...

Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...