Blog
FBI Exposes Integrity Technology Group: China’s Flax Typhoon Ran a Stolen-Mailbox Portal — What Indian Enterprises Must Do Now
FBI and CISA joint advisory AA26-281A names Beijing contractor Integrity Technology Group (Flax Typhoon) for running a portal selling stolen email access. Patch Exchange, enforce MFA now.
Read More →CVE-2026-96940 (CVSS 8.8): Microsoft Exchange Elevation of Privilege Lets Any Authenticated User Read All Mailboxes — Patch Now
CVE-2026-96940 (CVSS 8.8) lets any authenticated Exchange user read all mailboxes in an on-premises org. Apply Microsoft's out-of-band V2 September 2026 patch immediately.
Read More →Denmark CPR Breach 2026: 8.8 Million National ID Records Exposed via Third-Party Access Abuse — Zero-Trust Lessons for Every Enterprise
Denmark's CPR registry breach exposed 8.8 million national ID records via third-party API access abuse. Zero-trust lessons every enterprise must act on now.
Read More →CVE-2026-88779: Citrix NetScaler SAML Zero-Day Exploited in Targeted Attacks — Patch Now
CVE-2026-88779 is an actively exploited Citrix NetScaler SAML zero-day (CVSS 8.7). CISA KEV deadline passed 7 Oct. Patch to build 14.1-73.41 or 13.1-64.28 immediately.
Read More →CVE-2026-21589 (CVSS 9.3): Atlassian Patches Critical File-Read Flaw Across Eight Data Center Products — Patch Before PoC Drops
CVE-2026-21589 is a critical unauthenticated file-read vulnerability (CVSS 9.3) affecting all eight Atlassian Data Center products. Patch now before a public PoC enables mass exploitation.
Read More →CVE-2026-102489 & CVE-2026-102490: Autonomous AI Agent Chains Zammad Zero-Days to Breach DIVD’s Network in Seconds
An autonomous AI agent chained Zammad zero-days CVE-2026-102489 (session fixation to RCE) and CVE-2026-102490 (root escalation) to breach DIVD in seconds. CISA KEV added 2 Oct 2026 — patch now.
Read More →MCP Ransomware: How ‘Azazel’ Weaponised an AI Coding Assistant as a Live C2 Channel to Breach 20+ Enterprises
CloudSEK reveals how Azazel, an affiliate of the Gentlemen RaaS group, used Model Context Protocol (MCP) to turn AI coding assistants into live ransomware C2 channels — a first-ever documented…
Read More →UAT-11587 ‘Antino’ Backdoor: China-Nexus APT Weaponises Microsoft 365 to Spy on Indian Government Networks
China-nexus UAT-11587 has compromised 350+ endpoints across Asia using the Rust-built Antino backdoor, which hides all C2 traffic inside Microsoft 365 Outlook and OneDrive. India is among the hardest-hit countries.
Read More →Microsoft Digital Defense Report 2026: JadePuffer AI Ransomware Proves Autonomous Attacks Have Arrived
Microsoft DDDR 2026 confirms JADEPUFFER — the first fully autonomous AI ransomware — completed a real extortion attack in July 2026. Learn what Indian enterprises must do now.
Read More →Pentagon DMDC Breach: 3 Million Military Records Exposed — Zero-Trust Lessons for Every Enterprise
Pentagon's DMDC breach exposed 3M military records for 9 months. Zero-trust architecture could have stopped it — here's what enterprises must do now.
Read More →