Enterprise Security Tech

A newly disclosed vulnerability in OpenAI’s Codex environment is forcing a broader reckoning across the software industry, as researchers demonstrate how AI-powered coding tools can become high-value targets for credential theft and lateral movement inside developer ecosystems. Security researchers at BeyondTrust Phantom Labs uncovered a command injection flaw that allowed attackers to extract GitHub OAuth tokens directly from Codex execution environments. The issue, now pat

A critical vulnerability in Citrix NetScaler appliances is rapidly escalating from early reconnaissance into active exploitation, according to multiple security researchers tracking activity in the wild. The flaw, tracked as CVE-2026-3055, exposes enterprise systems to sensitive data leakage and is already drawing attention from threat actors probing internet-facing infrastructure. Security researchers at Defused Cyber and watchTowr report that attackers initially began by

At a time when identity-based attacks are outpacing traditional defenses, Token is betting that the future of authentication lies entirely off the grid. At RSA Conference 2026, the company introduced the TokenCore Node, a compact biometric authenticator built for environments where cloud connectivity is not just undesirable, but prohibited. The launch targets a growing segment of security-conscious organizations, including defense contractors, critical infrastructure operato

As governments and enterprises race to prepare for the arrival of quantum computing threats, cybersecurity vendor pQCee has introduced a new cryptographic platform designed to help organizations transition faster to post-quantum standards without overhauling their infrastructure. The company announced the release of its Cryptographic Next Generation (CNG) provider for Microsoft Windows, a move aimed at embedding quantum-safe cryptography directly into one of the world’s most

A routine fitness upload has once again exposed the hidden risks of consumer apps in sensitive environments. This time, the unintended disclosure involved one of Europe’s most important naval assets, surfacing at a moment of heightened geopolitical tension in the Middle East. According to a report by Le Monde, a French naval officer onboard the aircraft carrier Charles de Gaulle publicly shared a workout on the fitness platform Strava, inadvertently revealing the vessel’s nea

Federal cybersecurity officials are raising alarms over a growing wave of attacks targeting endpoint management systems across U.S. organizations, following a high-profile breach involving medical technology firm Stryker earlier this month. The Cybersecurity and Infrastructure Security Agency (CISA) confirmed it is actively tracking malicious activity that abuses legitimate endpoint management tools to gain control over enterprise environments. The advisory comes as investig