Enterprise Security Tech

CVE-2026-123158 can let remote attackers bypass password authentication on certain musl-based Linux systems with PAM disabled.

Apiiro says Claude Code permission files and other agent artifacts exposed thousands of apparent credentials across public repositories.

A February 2025 migration left an internal DigiCert system internet-accessible, leading to unauthorized access to archived customer data in June 2026.

Stolen credentials tied to Qubole's AWS account let an attacker use dormant vendor roles to reach data and secrets across more than a dozen organizations.

Google DeepMind says AI agents reduced computation for a legacy RSA-1024 signature attack and proposed a cheaper theoretical batch-factoring method.

Fleet is expanding its European presence as organizations seek greater control over the systems used to manage and secure employee devices.