Tech news
Security technology news
Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.
Category
- All
- Threats, ransomware & breaches
- Vulnerabilities & exploits
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
- AI security
- Policy, regulation & law enforcement
- Industry & products
Region
- Identity & access Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity DataAmerican blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that the breach did not result in unauthorized access to its investigation content, authentication… The Hacker News · Global · 31 Oct 2026
- Identity & access From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion pathsTeams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through authentication relay and Kerberos. The post From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths appeared first on Microsoft Security Blog. Microsoft Security Blog · Global · 30 Oct 2026
- Identity & access Passkeys Are Better Than Passwords. But They Are Not Enough.As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it. The post Passkeys Are Better Than Passwords. But They Are Not Enough. appeared first on SecurityWeek. SecurityWeek · Global · 30 Oct 2026
- Identity & access Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background. To qualify, a store must pass identity checks and send Google its full catalog, along with every new app and… The Hacker News · Global · 28 Oct 2026
- Identity & access American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign ExposedModern phishing campaigns can compromise American businesses without relying on traditional credential theft. Attackers can abuse legitimate cloud services, authentication mechanisms, and trusted business workflows to gain access to corporate accounts while leaving fewer obvious signs behind.… The Hacker News · Global · 28 Oct 2026
- Identity & access Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooksMicrosoft Threat Intelligence analyzes the LiteLLM 1.107.0 compromise, including Python startup hooks, credential theft, remote code loading, detections, and mitigations. The post Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks appeared first on… Microsoft Security Blog · Global · 23 Oct 2026
- Identity & access The Current Landscape of OAuth AttacksUnit 42 explores modern OAuth threats and actionable steps organizations can take to protect their environments. The post The Current Landscape of OAuth Attacks appeared first on Unit 42. Unit 42 · Global · 22 Oct 2026
Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.