(Adobe Stock)

OAuth client ID spoofing silently validates stolen Microsoft Entra ID credentials

Steve ZurierJuly 14, 2026

Attackers run multiple spoofing campaigns to confirm credentials.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Identity
Inheriting trust: Why unified identity fabrics are becoming essential for agentic AI
Identity
Seeing the unseen: Closing AI identity blind spots

PODCASTS

Application security
Discovering & Securing Your AI Agent Attack Surface – Jeremy Snyder – ASW #391
AI/ML
Cloud Security Meets AI: What CISOs Need to Govern Before They Scale – Brent Neal – CSP #226
DevSecOps
Hungry? We talk Smoked Meat, Poutine, and Bagel – also, Identiverse Interviews! – François Proulx, John Pritchard, Cassie Christensen, Jaime Lewis-Gross, Kim Brown – ESW #467
Vulnerability Management
Borg, GitLost, ColdFusion, GodDamn, GhostApproval, OWA, Epaphroditus, Josh Marpet,.. – SWN #597
IoT
AI Is Annoying & IoT Devices Still Get Hacked – PSW #934

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Perspectives

In Brief

More Resources

(Credit: Postmodern Studio – stock.adobe.com)

Application security

RabbitMQ fixes flaw that allowed broker takeover via OAuth secret disclosure

SC StaffJuly 14, 2026

An additional flaw would allow an authenticated attacker with zero permissions to view cross-tenant metadata.

Russian hack attack concept, on the computer keyboard. 3D rendering

Critical Infrastructure Security

Russia’s FSB attacks critical infrastructure, says 12 Western nations

Steve ZurierJuly 13, 2026

Russian hackers target outdated Cisco routers in decade-long espionage campaign.

Rep. Rick Larsen, D-Wash.

Critical Infrastructure Security

Rep. Rick Larsen: Bipartisan infrastructure key to safer transportation

SC StaffJuly 13, 2026

Lawmaker says bipartisan infrastructure investment is essential to modernize U.S. transportation.

(Credit: Timon – stock.adobe.com)

Incident Response

CISA shares postmortem of GitHub credential leak

Laura FrenchJuly 10, 2026

CISA credentials and code were uploaded to a public repository on a contractor’s personal GitHub account in May.

Social engineering cyber threat — growing human hacking attack concept for security awareness article, card on black keyboard

Okta warns of vishing scheme that extorts data

Steve ZurierJuly 10, 2026

Attackers pose as IT and tell employees to enroll an MS passkey, but the bad guys register their own key and take over the user.

‘GodDamn’ ransomware deploys PoisonX driver to kill EDR

Laura FrenchJuly 10, 2026

GodDamn, a rebrand of Beast and Monster ransomware, leverages AnyDesk for remote access.

Skill development and AI education concept, hands using mouse and keyboard with icons for brain gears, graduation cap, book and presentation chart, upskilling workforce

Two-year online college ‘Campus’ now offers cybersecurity track

Steve ZurierJuly 9, 2026

Online program aims to build a pipeline of qualified candidates to fill positions that require much-needed AI skills.

‘GhostApproval’ technique leads AI coding tools to alter files outside of sandbox

Laura FrenchJuly 9, 2026

The technique abuses symlinks to escape the intended workspace and weaken human-in-the-loop protections.

Events