Enterprise Security Tech

A new security report signals a sharp change in how risk is evolving across the Microsoft ecosystem. While the total number of disclosed vulnerabilities dipped slightly in 2025, the most dangerous flaws surged, pointing to a more concentrated and potentially more exploitable threat landscape. According to the latest annual findings from BeyondTrust, critical vulnerabilities affecting Microsoft platforms doubled year over year. The shift suggests attackers are focusing less on

A growing dispute over data exposure at Swedish AI coding startup Lovable is raising fresh questions about how quickly emerging developer tools are scaling without fully locking down security controls. The controversy began when an X user alleged that projects created on the platform prior to late 2025 were broadly accessible. According to the post, the individual was able to view other users’ application code, chat interactions with AI systems, and associated customer data u

A new wave of supply chain attacks is hitting the npm ecosystem, and this time the blast radius is moving deeper into AI developer workflows. Security researchers at Socket say the latest campaign shows strong overlap with a previously identified wormable attack dubbed CanisterWorm, suggesting either a shared operator or direct reuse of adversary tooling. At the center of the incident are compromised packages tied to Namastex Labs, a company that promotes AI consulting and au

A brief but high-impact compromise of CPUID’s official website has exposed a growing weakness in the modern software supply chain. For less than 24 hours, attackers hijacked download links for widely used system utilities, replacing legitimate installers with malware-laced packages designed to silently establish remote access on victim machines. The incident, which unfolded between April 9 and April 10, targeted users attempting to download tools such as CPU-Z and HWMonitor.

Identity Management Day 2026 highlights a hard shift in cybersecurity strategy as enterprises confront the rise of non human identities and AI driven access. Identity has quietly become the backbone of modern cybersecurity, but in 2026 it is no longer operating in the background. It is now the front line. As organizations expand across multi cloud environments, SaaS platforms, and partner ecosystems, traditional security boundaries continue to erode. What remains constant is

A new wave of research is reshaping how security teams think about Google API keys. Long treated as low-risk identifiers for public services, these keys are now being linked to direct access into Gemini AI environments, creating a pathway for data exposure, service abuse, and unexpected financial impact. Security researchers from CloudSek are warning that thousands of Android applications may be unintentionally exposing access to Google’s AI infrastructure through hardcoded