Enterprise Security Tech

As the cybersecurity industry closes the books on 2025, the year is already solidifying around a familiar but unsettling conclusion: attackers didn’t need radically new malware to cause outsized damage. They needed people, timing, and a growing catalog of quietly catastrophic infrastructure flaws. That’s the throughline emerging from a year-end review by incident response specialists at LevelBlue , which absorbed digital forensics heavyweight Stroz Friedberg earlier this year

For a brief moment last week, the internet appeared to relive a familiar panic: headlines warning that cybercriminals had walked away with data from millions of Instagram users. Security vendor Malwarebytes said attackers had stolen sensitive information tied to roughly 17.5 million accounts. Instagram pushed back just as forcefully, insisting there was no breach of its systems at all. Both claims can technically coexist — and that uneasy overlap says more about the modern d

A newly disclosed flaw in MongoDB dubbed 'MongoBleed' is exposing a subtle but dangerous reality of modern cloud infrastructure: sometimes the most sensitive data does not need to be stolen from a database table at all. It can simply leak out of memory. Tracked as CVE-2025-14847 , the vulnerability affects how MongoDB processes zlib-compressed network traffic. Under specific conditions, a remote attacker can trigger the database server to return fragments of its own uniniti

Every December, the internet dresses itself up for the holidays. Social feeds fill with lights and nostalgia, inboxes clog with end of year reminders, and millions of people quietly reset their passwords. According to a new analysis of breached credentials, that seasonal spirit is leaking straight into login security in ways attackers already understand all too well. Security researchers at Specops Software examined roughly 800 million compromised passwords and found that ho

South Korea’s dominant e-commerce engine, Coupang, has confirmed a sprawling data breach that exposed the personal information of nearly 34 million customers —a staggering incident that appears to have unfolded quietly for more than five months before being detected. The company initially believed that only a few thousand users had been affected when anomalous access was spotted on November 18. But as investigators dug deeper, a far broader compromise emerged: names, emails,

Salesforce has pulled the emergency brake on a swath of Gainsight-published applications after uncovering suspicious activity tied to the integrations — a move that instantly set off alarm bells across the SaaS security world and reignited concerns about the increasingly fragile state of OAuth-based trust models. Shortly after 8:00 p.m. on November 19, Salesforce issued a security advisory confirming that unusual activity linked to Gainsight applications could have enabled un