NHI, AI, IAM & Cyber Security Breaches & Vulnerabilities

MongoDB log floods after MongoBleed: are your controls keeping up?

First post and replies  | Last post by Mr NHI, 3 weeks ago

Azure WAC token validation flaws: what IAM teams need to know

First post and replies  | Last post by Mr NHI, 3 weeks ago

Malicious npm packages and C2 evasion: what teams need to know

First post and replies  | Last post by Mr NHI, 3 weeks ago

Kerberos CNAME abuse: are your Windows relay controls enough?

First post and replies  | Last post by Mr NHI, 3 weeks ago

Shai-Hulud supply chain abuse: what IAM and SOC teams missed

First post and replies  | Last post by Mr NHI, 3 weeks ago

Financial services attack paths: what IAM and security teams are missing

First post and replies  | Last post by Mr NHI, 3 weeks ago

Developer tooling abuse: what it means for IAM and NHI governance

First post and replies  | Last post by Mr NHI, 3 weeks ago

VS Code tasks files and developer compromise: are your controls ready?

First post and replies  | Last post by Mr NHI, 3 weeks ago

Cal.com account takeover: what broken access control means for teams

First post and replies  | Last post by Mr NHI, 3 weeks ago

Browser extension phishing and AI credential abuse: what should teams do?

First post and replies  | Last post by Mr NHI, 3 weeks ago

Ivanti EPMM exploitation: what it means for mobile identity control

First post and replies  | Last post by Mr NHI, 3 weeks ago

Ivanti EPMM zero-days: what identity teams should watch next

First post and replies  | Last post by Mr NHI, 3 weeks ago

Notepad++ supply chain attack: what it means for trust and updates

First post and replies  | Last post by Mr NHI, 3 weeks ago

n8n webhook path traversal: what it means for SSH-reachable access

First post and replies  | Last post by Mr NHI, 3 weeks ago

n8n StripeTrigger bypass: are webhook trust checks enough?

First post and replies  | Last post by Mr NHI, 3 weeks ago

Prince of Persia and the blackout effect: what defenders should watch

First post and replies  | Last post by Mr NHI, 3 weeks ago

MCP supply chain poisoning: are developer trust signals enough?

First post and replies  | Last post by Mr NHI, 3 weeks ago

Claude Desktop extensions and MCP trust boundaries: are controls keeping up?

First post and replies  | Last post by Mr NHI, 3 weeks ago

LockBit 5.0 and Chrome zero-day activity: what should teams act on?

First post and replies  | Last post by Mr NHI, 3 weeks ago

Multi-agent LLMs and PDF engines: what security teams should note

First post and replies  | Last post by Mr NHI, 3 weeks ago