#identity

The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions↗

elastic.co Nov 6, 2026 vuln malware identity privacy chrome-extension browser cti dlp notes
M365 Token Spray and Replay Campaign Compromises Business Email Accounts↗

huntress.com Nov 6, 2026 cloud incident vuln identity privacy cti detection campaign-compromises notes
Your Next Insider Threat Won’t be Human: Securing AI Agents From the Outside in↗

rapid7.com Nov 6, 2026 identity ai notes
GitHub’s model for secret detection: Finding more secrets with less noise↗

github.blog Nov 6, 2026 appsec cloud identity ai tooling notes
MadApe: The Code That Opens the Door↗

group-ib.com Nov 6, 2026 research cloud vuln identity cti tooling notes
IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It↗

bleepingcomputer.com Nov 6, 2026 identity privacy mobile notes
mSecure password manager hack prompts password reset warnings↗

bleepingcomputer.com Nov 6, 2026 appsec incident vuln identity privacy dlp notes
Threat actors use agentic AI tooling to find and abuse exposed secrets↗

microsoft.com Nov 6, 2026 appsec cloud vuln identity ai privacy artex cti tooling notes
Truffle Security launches program to revoke 1.4 million live secrets

bleepingcomputer.com Nov 5, 2026 appsec vuln identity privacy tooling dlp notes
OpenSSH flaw lets attackers log into password-disabled Linux accounts

bleepingcomputer.com Nov 5, 2026 appsec vuln identity supply-chain notes