Blog

Many organizations have moved beyond AI experimentation and are now trying to deploy AI across business-critical operations. However, scaling AI introduces new problems that were less visible during pilot projects. Rising inference and token costs are making AI workloads more expensive than expected, while governance, compliance, and infrastructure requirements are becoming increasingly complex. According to…

Organizations are increasingly moving toward IPv6-only or IPv6-first networks as available IPv4 addresses become harder to obtain and manage. However, many business applications, services, and devices still rely on IPv4 connectivity. This dependency creates a major obstacle for enterprises that want to modernize their networks without maintaining both IPv4 and IPv6 infrastructure simultaneously. Without a…

Cybersecurity researchers have observed more than 400 incidents in which threat actors abused the external chat feature in Microsoft Teams to gain initial access to corporate environments. Rather than exploiting a software flaw, attackers took advantage of Teams’ default external-access capabilities and employees’ trust in familiar collaboration tools. According to researchers at Arctic Wolf, the…

Microsoft has released an out-of-band update for Windows after the compromise of certificate signing keys belonging to eMudhra, which is an Indian certificate authority. This incident raised concerns that attackers could potentially create fraudulent certificates or sign malicious content that would appear trustworthy to Windows devices. To protect customers, Microsoft removed affected certificates from its…

Microsoft is preparing to retire the Microsoft Defender for Endpoint (MDE) Advanced Hunting API and Microsoft Defender XDR Advanced Hunting API, which will require organizations to move security integrations to the Microsoft Graph Security API before the retirement deadline. This change is part of Microsoft’s effort to consolidate security data access under a single API…

The PHP2Shell vulnerabilities exposed that critical flaws can now move from discovery to weaponization at unprecedented speed. Attackers began exploiting the vulnerability before many organizations even knew they were exposed, while public disclosure added pressure on security teams racing to identify affected systems. This situation was further complicated by legacy PHP deployments, embedded software, and…

Microsoft has confirmed two ongoing problems affecting Universal Print in Windows 11. The company has warned that printers originally installed on Windows 10 may stop working after upgrading to Windows 11 and installing certain updates. Secondly, some Konica Minolta devices intermittently lose communication with the cloud-based printing service, which prevents them from retrieving print jobs….

In case you haven’t heard by now, there was quite the buzz recently in the Entra community when the ConnectWise backup application was the source of a supply-chain attack. Huntress reported that attackers obtained the ConnectWise app credentials. They used those credentials to authenticate to more than 170 Microsoft Entra tenants. Every multi-tenant app has…

A newly observed campaign by Microsoft Threat Intelligence shows how the China-aligned threat actor Storm-0940 used the open-source AI penetration testing framework ARTEX to automate and accelerate attacks, including activity linked to the recent ConnectWise supply chain compromise. This campaign shows how agentic AI can compress attack timelines from days or weeks into just a…

This guide compares the 7 best Active Directory change auditing tools for monitoring, investigating and reversing changes across hybrid identity environments. Active Directory remains a critical control plane for enterprise access. An unauthorized change to a privileged group, Group Policy Object (GPO) or directory permission can give an attacker extensive access, while an accidental modification…

Microsoft is preparing to phase out its own SMS and voice-based authentication services, forcing organizations that still rely on telephony-based multifactor authentication (MFA) to rethink how those users will sign in. The company continues to promote phishing-resistant methods such as passkeys, but some businesses face regulatory, operational, or technical requirements that make SMS and voice…

Cybersecurity researchers have discovered a campaign that abuses sponsored search results for “Amazon Business” to lure users to a convincing fake Amazon login page. After entering their details, victims are presented with a fraudulent CAPTCHA that secretly copies a command to their clipboard and instructs them to paste it into the Windows Run dialog. This…