Topic: single sign-on
-
Hexnode IdP: Device-Aware Zero Trust for Secure Enterprise Access
Hexnode has launched Hexnode IdP, a native identity layer that integrates enterprise authentication and identity management directly into its UEM platform, eliminating the need for costly third-party access control licenses. The solution enforces context-aware, compliance-based access by continuo...
Read More » -
Optimizely Data Breach Confirmed After Vishing Attack
Optimizely, a major ad-tech firm, suffered a security breach after a sophisticated voice-phishing attack on February 11th, which allowed intruders to access basic business contact information from its CRM. The company confirmed the attackers were contained and could not access sensitive customer ...
Read More » -
Microsoft Entra Accounts Targeted in Vishing Attacks
A new wave of attacks combines device code phishing with voice phishing (vishing) to compromise Microsoft Entra accounts, exploiting the legitimate OAuth 2.0 device authorization flow to steal authentication tokens without traditional password theft. The **ShinyHunters** extortion group is believ...
Read More » -
Figure Data Breach Exposes 1 Million Accounts
A major data breach at Figure Technology Solutions, caused by a sophisticated social engineering attack, compromised the personal information of nearly one million individuals, including sensitive customer data like addresses and dates of birth. The ShinyHunters extortion group claimed responsibi...
Read More » -
Canada Goose Data Breach Exposes 600,000 Customers
A data leak exposed over 600,000 Canada Goose customer records, but the company states its own systems were not breached and no full financial data was involved. The leaked information includes extensive personal and order details, enabling highly targeted phishing, social engineering, and fraud ...
Read More » -
Major Dating Apps Hacked: Hinge, Tinder, OkCupid Data Exposed
A major data breach at Match Group, parent company of Hinge, Tinder, and OkCupid, was caused by a phishing attack that compromised an employee's single sign-on account. The stolen data includes millions of user records and internal documents, but the company states passwords, financial details, a...
Read More » -
Secure Active Directory with UserLock IAM: Product Showcase
UserLock is a modern IAM layer for Microsoft Active Directory that enhances security with granular MFA, contextual access rules, and real-time session monitoring without requiring a disruptive identity overhaul. It provides comprehensive visibility and control by aggregating AD entities into dash...
Read More » -
Your Browser Is Devouring Your Security
Modern web browsers centralize business operations but create significant security blind spots, exposing organizations to data leakage and identity compromise through concentrated sensitive activities. AI tools and browser extensions operate largely unmonitored, with employees frequently using th...
Read More » -
Why Attackers Are Phishing on LinkedIn
Phishing attacks have expanded beyond email, with 34% now occurring on platforms like LinkedIn, targeting executives in finance and tech sectors, but are severely underreported due to reliance on email-focused security metrics. LinkedIn phishing evades conventional defenses by bypassing email sec...
Read More » -
Proxmox Mail Gateway 9.0: Open-Source Email Security Released
Proxmox Mail Gateway 9.0 is an open-source email security solution that protects against threats like spam, phishing, and malware by filtering emails before they reach internal servers. The platform is built on Debian 13 and Linux kernel 6.14, featuring updated security tools such as ClamAV 1.4.3...
Read More » -
Plex Data Breach: Users Urged to Change Passwords, Upgrade Servers
Plex has confirmed a security breach involving unauthorized access to customer emails, usernames, and securely hashed passwords, but no payment information was compromised. The company advises all users to reset their passwords, enable two-factor authentication, and log out from all devices to en...
Read More » -
WA Health Launches $104M Digital Medical Record System
Western Australia has launched a $104 million digital medical record system to modernize patient information management and improve healthcare delivery across its vast, dispersed network. The system's first phase successfully migrated 44 million documents and introduced features like single sign-...
Read More »