Tycoon2FA Used Microsoft’s Login Flow Against You
Tycoon2FA's new device-code phishing flow hijacks Microsoft 365 sessions without stealing a password. Here's what actually stops it.
May 2026
Grafana Lost Its Codebase to a Stolen Token
A stolen GitHub token gave attackers Grafana's source code. The cybersecurity lesson is bigger than one vendor. See where to start.
Can You Sinkhole a Network That Has No Center?
Turla's peer-to-peer Kazuar reworking breaks the takedown model defenders relied on. Here's what your cybersecurity program needs to change. Read on.
The Azure Bug Microsoft Says Never Happened
A silent Azure fix, a denied report, no CVE. Here's the cybersecurity blind spot vendors won't advertise, and how to close it.
What Happens When AI Reads Code You Stopped Reviewing?
An 18-year-old NGINX flaw just got working exploit code. Here's the cybersecurity shift that explains why boring infrastructure needs urgent hardening today.
After CrowdStrike, Microsoft Wants the Kernel Back
Microsoft can now remotely roll back faulty Windows drivers. Here's what the cybersecurity shift means for your kernel and IR plan.
The Plugin Was Free. The Card Data Wasn’t.
Plugin skimmers, session-stealing infostealers, and compromised npm packages all skip the password entirely. Here's what cybersecurity teams should do now.
The Malware Doesn’t Phone Home Anymore
Turla's P2P Kazuar, CI/CD pipeline attacks, and trojanized installers prove signature-driven cybersecurity is fading. See what to do next.
One Plugin, A Million Sites, Zero Adult Supervision
A million WordPress sites just learned their plugins leak credentials. See what cybersecurity defaults should actually look like.
The Worm Now Ships With Documentation
TeamPCP open-sourced a worm. Microsoft shipped another Exchange zero-day. Rocky Linux gave up on upstream cadence. Here's what cybersecurity teams should do.