Hackers Abuse Microsoft Entra ID Accounts to Steal Corporate Cloud Data
The Storm-2949 threat group executed a complex Microsoft Entra ID attack to steal sensitive data from corporate cloud environments.
Secure.com News
Stay updated with the latest cybersecurity news, threat intelligence, and industry updates from secure.com.
Browse by Category
Mini Shai-Hulud Strikes Again: 314 @antv npm Packages Hijacked in 22-Minute Burst
A fresh npm supply chain attack tied to the Mini Shai-Hulud worm has poisoned hundreds of @antv packages, putting developer credentials at risk.
Microsoft Confirms Windows 11 Update Fails With Error 0x800f0922
Microsoft has officially confirmed that its May 2026 Patch Tuesday update for Windows 11 is failing with error code 0x800f0922.
Four Malicious npm Packages Steal SSH Keys, Cloud Credentials, and Crypto Wallets
Security researchers discovered four malicious npm packages designed to steal SSH keys, cloud credentials, and cryptocurrency wallets from developers.
Grafana Tells Extortionists to Get Lost After GitHub Token Breach Exposes Codebase
The Grafana GitHub token breach saw attackers steal a privileged token, exfiltrate the codebase, and try to extort the company. Grafana said no.
OpenAI Confirms Breach After TanStack npm Supply Chain Attack Hit Two Employee Devices
The TanStack npm supply chain attack reached OpenAI's internal repositories. Here is the full picture of what actually happened.
NGINX Was Hiding a Critical Bug for 18 Years. An AI Just Found It.
A newly disclosed NGINX vulnerability lay dormant in the codebase for 18 years before an AI system pulled it into daylight.
The SailPoint Lesson: Why Identity Infrastructure Remains the Weakest Link in Supply Chain Security
The SailPoint GitHub breach exposes how supply chain security and identity infrastructure remain the softest targets in enterprise defense.
Hackers Abuse Google Ads and Claude.ai Shared Chats to Target Mac Users
A new macOS malware campaign exploits Google Ads and Claude.ai shared chat features to distribute malicious software through fake AI applications.
New Linux PamDOORa Backdoor Uses PAM Modules to Steal SSH Credentials
Cybersecurity researchers have discovered PamDOORa Linux backdoor being sold on Russian cybercrime forums for $1,600.
New Linux Bug ‘Dirty Frag’ Hands Root Access to Attackers
A newly disclosed Dirty Frag Linux vulnerability allows attackers to gain root privileges by chaining two separate kernel flaws together.
Vimeo Data Breach Exposes 119,000 Users Unique Email Addresses
A Vimeo data breach discovered in April 2026 exposed 119,000 unique email addresses through a supply chain security incident.