Cyber CrimeMeshCentral Backdoor Hid Inside 3BB Network
Hunt.io says an attacker used a legitimate remote-management tool to hold root access inside Thailand's 3BB and target subscriber credentials.
> Search
23 results for “entra”
Cyber Crime
SecurityN-able's Fourth N-central Hotfix Still Leaves Exploitation Question Open
N-able shipped a fourth N-central hotfix for a critical RCE flaw, but its own statements conflict on whether it's been exploited.
SecurityCoast Guard Creates Central Maritime Cyber Policy Office
New CG-MCP office centralizes maritime cybersecurity policy as ports face rising operational technology risks.
Cyber CrimeRingCentral Breach Exposes 1.6M Accounts
ShinyHunters leaks data from 1.6 million RingCentral accounts after July hack.
SecurityOracle offers free database security tool
Oracle's new Database Security Central tool is free until February 2027, arriving amid rising database attacks.
Tech NewsCentral Eurasian startups gain global stage
Road to Battlefield competition draws record applications, 84% AI startups, and new investment prizes.
Cyber CrimeRansomware Group Hardens Infrastructure via Smart Contracts
DeadLock uses Polygon smart contracts to make extortion infrastructure harder to disrupt, Microsoft reports.
Cyber CrimeStorm-1175 Debuts New Ransomware
Microsoft says China-linked Storm-1175 shifts from Medusa to the new StormEncryptor ransomware, likely via N-central flaw CVE-2026-18577.
Cyber CrimeFormer Medusa Affiliate Debuts New Ransomware
Microsoft tracks Storm-1175's shift to StormEncryptor, following exploitation of an N-central flaw.
SecurityPasskey Defenses Undermined by Weak Surroundings
Recent research shows passkey protections can be bypassed without breaking the underlying cryptography.
SecurityCritical Microsoft Entra SyncFabric Flaw
A critical privilege escalation vulnerability in the Microsoft Entra Provisioning Service allows authorized attackers to gain elevated network access.
Cyber CrimeRingCentral Spoof Hijacks M365 Accounts
Phishing service Greatness uses spoofed RingCentral emails to bypass MFA and compromise Microsoft 365 accounts.
SecurityCISA Warns of Active N-able N-central Flaw
CISA has added an authentication bypass vulnerability in N-able N-central to its Known Exploited Vulnerabilities catalog, requiring immediate action.
Runware Debuts Portable AI Data Pods
Runware is introducing modular, transportable compute units designed to decentralize AI inference and bypass traditional builds.
SecurityCentral Asia Targeted by New Backdoors
Researchers are tracking a sophisticated campaign against Central Asian governments involving custom OctLurk and SilkLurk malware.
SecurityAddressing the Proliferation of Shadow AI
As automated agents become integrated into workflows, security teams struggle to maintain visibility over decentralized, unmanaged AI deployments.
Cyber CrimeDevMan RaaS Formalizes Affiliate Control
A centralized portal upgrade aims to standardize affiliate workflows and tighten operational management for the DevMan ransomware group.
SecurityIndia Targets Decentralized App Code
A government demand to remove open-source repositories from GitHub challenges the legal limits of controlling offline messaging.
SecuritySecuring Identity Without Data Exposure
New architectural approaches to age verification aim to satisfy global mandates while keeping biometric data off centralized servers.
Tech NewsThe Impending Redistribution of AI Wealth
Venture capitalist Neil Rimer warns that the massive concentration of wealth in the AI sector may soon trigger forced state intervention.
SecurityWhite House Launches Gold Eagle Defense
The US government establishes a centralized clearinghouse to combat AI-powered threats and accelerate software vulnerability patching.
SecurityMastering Entra ID Defense Through Gamified Simulation Training
Varonis Threat Labs launches an interactive capture-the-flag experience to teach security teams how to combat modern identity attacks.
SecurityCloud Authentication Under Siege: The Rise of OAuth ID Spoofing
A stealthy new attack technique is bypassing traditional security logs, allowing threat actors to compromise cloud-based infrastructure.