1+ hour, 48+ min ago   (156+ words) As of September 7, Microsoft has closed the self-service recovery loophole, marking a structural shift toward mandatory phishing-resistant identity. As of September 7, 2026, Microsoft Entra ID has terminated the use of unregistered directory contact data for self-service password reset (SSPR). This SSPR…...

1+ day, 13+ hour ago   (441+ words) CVE-2026-83711 and CVE-2026-70352: The CVSS 10.0 Baseline On September 3, 2026, Microsoft disclosed nine vulnerabilities outside the standard Patch Tuesday cycle. Two of these carry a CVSS 10.0 rating: CVE-2026-83711, an authorization bypass in Azure AD B2C involving user-controlled keys, and CVE-2026-70352, a missing authentication…...

1+ day, 21+ hour ago   (247+ words) A flaw in Lenovo ID's email verification system allowed unauthorized access to approximately 5,000 Dropbox accounts between August 4 and August 21. The breach revealed an unusual contradiction for this type of incident, as it was sufficient to register a Lenovo ID using…...

1+ day, 19+ hour ago   (267+ words) Law enforcement secured the first federal juvenile case involving a 17-year-old linked to 764, challenging a tactic involving the deliberate recruitment of minors to escape federal consequences. Across borders, the U.S. and U.K. forged a first-of-its-kind alliance against scam centers, combining intelligence and…...

2+ day, 14+ hour ago   (416+ words) A Lenovo ID verification flaw let attackers compromise 5,000 Dropbox accounts without passwords. Learn what happened and how users can stay protected. Dropbox confirmed this week that attackers compromised roughly 5,000 user accounts during a 17-day intrusion between Aug. 4 and Aug. 21, 2026, with…...

2+ day, 12+ hour ago   (1353+ words) AUSTIN, TEXAS — A chief theme at this year's Ping YOUniverse conference Tuesday and Wednesday of last week (Sept. 1 and 2) was the notion of "verified trust," which Ping Identity views as the next stage of the authentication of humans. "Every step…...

2+ day, 6+ hour ago   (1627+ words) Home » Technology & AI Wondering how to protect a small business from cyber attacks without turning your budget into another monthly headache? The good news is that the strongest first steps are often simple: protect accounts, keep devices updated, back up…...

2+ day, 4+ hour ago   (195+ words) WhatsApp introduced an upgraded suite of account protections, featuring a stronger two-step verification system that now supports full passwords with letters, numbers and special characters. The update also expands passkey support, allowing users to register more than one passkey across…...

3+ day, 2+ hour ago   (692+ words) Cyber attackers are getting faster, more scalable and more convincing. But for businesses, the response does not necessarily require radically different technology. It requires stronger processes, clearer accountability and the ability to keep operating when an attack gets through. Paul…...

3+ day, 1+ hour ago   (23+ words) A short, reproducible guide to wiring ArgoCD login to AWS Identity Center using ArgoCD's bundled Dex... Tagged with aws, sso, argocd....