Security Architecture

Chrome 2FA protection is rolling out to Windows users to reduce account takeovers that bypass multi-factor authentication. Google is introducing device-bound session credentials in Chrome, binding session tokens …

Google API security vulnerability in Android apps is enabling unauthorized calls to Gemini AI endpoints via hardcoded API keys, exposing developers to fraud and quota abuse. Researchers observed …

The Masjesu DDoS botnet is escalating attacks against internet-connected devices, combining stealthy techniques with large-scale firepower to overwhelm targets and frustrate defenders. Recent analysis shows the malware’s operators …

The Ninja Forms vulnerability is under active exploitation, enabling unauthenticated takeover of WordPress sites running the popular form builder. The flaw is tracked as CVE-2024-43917. The widely deployed …

The Flowise vulnerability is under active exploitation, with attackers scanning and compromising exposed instances for remote code execution and secret theft. Security teams should act immediately. Verified incidents …

iOS security vulnerabilities have been added to the CISA KEV catalog following confirmed links to the Coruna exploit kit. The listing indicates active exploitation and available patches. The …

An iOS exploit kit called Coruna powers sophisticated nation-state attacks against users worldwide, with security researchers identifying this dangerous toolset being leveraged by state-sponsored threat actors to compromise …

Gmail account security faces unprecedented threats as sophisticated attack campaigns continue targeting Google’s 2 billion active users worldwide. Cybercriminals now deploy AI-powered techniques, including account recovery prompt exploits …

Google’s decision to let users change Gmail addresses for the first time in 20 years introduces both enhanced security flexibility and new phishing risks. Gmail now permits users …

Virtual CISO services have emerged as a critical solution for organizations lacking access to executive-level cybersecurity leadership. Small and mid-sized businesses face the same sophisticated threat actors as …