Blog – Page 231 – Cyber Mike

[Webinar] Find and Eliminate Orphaned Non-Human Identities in Your Environment

In 2024, compromised service accounts and forgotten API keys were behind 68% of cloud breaches. Not phishing. Not weak passwords. Unmanaged non-human identities that nobody was watching.
For every employee in your org, there are 40 to 50 automated credentials: service accounts, API tokens, AI agent connections, andOAuth grants. When projects end or employees leave, most

Splunk Enterprise Update Patches Code Execution Vulnerability

The flaw allows low-privileged users to upload files to a temporary directory to achieve remote code execution.

The post Splunk Enterprise Update Patches Code Execution Vulnerability appeared first on SecurityWeek.

Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution

Cisco has announced patches to address four critical security flaws impacting Identity Services and Webex Services that could result in arbitrary code execution and allow an attacker to impersonate any user within the service.
The details of the vulnerabilities are below –

CVE-2026-20184 (CVSS score: 9.8) – An improper certificate validation in the integration of single sign-on (SSO)

Microsoft Paid Out $2.3 Million at Zero Day Quest 2026 Hacking Contest

Researchers found more than 80 high-impact cloud and AI vulnerabilities during the event, which had a $5 million prize pool.

The post Microsoft Paid Out $2.3 Million at Zero Day Quest 2026 Hacking Contest appeared first on SecurityWeek.

Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks

A “novel” social engineering campaign has been observed abusing Obsidian, a cross-platform note-taking application, as an initial access vector to distribute a previously undocumented Windows remote access trojan called PHANTOMPULSE in attacks targeting individuals in the financial and cryptocurrency sectors.
Dubbed REF6598 by Elastic Security Labs, the activity has been found to leverage

Cyber News

[Webinar] Find and Eliminate Orphaned Non-Human Identities in Your Environment

Splunk Enterprise Update Patches Code Execution Vulnerability

Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution

Microsoft Paid Out $2.3 Million at Zero Day Quest 2026 Hacking Contest

Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks

NIST Prioritizes NVD Enrichment for CVEs in CISA KEV, Critical Software

Data breach at edtech giant McGraw Hill affects 13.5 million accounts

Hidden Passenger? How Taboola Routes Logged-In Banking Sessions to Temu

Cisco Patches Critical Vulnerabilities in Webex, ISE

Ransomware Hits Automotive Data Expert Autovista