Security

GitHub Action Secrets aren’t secret anymore: exposed PATs now a direct path into cloud environments

Wiz has found threat actors exploiting GitHub tokens, giving them access to GitHub Action Secrets and, ultimately, cloud environments.

December Patch Tuesday: Windows Cloud Files Mini Filter Driver hole already being exploited

Attacker with local access could escalate privileges, Microsoft warns; analyst calls it ‘the most urgent concern’ this month.

Gemini for Chrome gets a second AI agent to watch over it

Google acknowledged the prompt injection risks in its browsing assistant, deploying a ‘user alignment critic’ to vet its actions

Racks, sprawl and the myth of redundancy: Why your failover isn’t as safe as you think

Today’s outages hit harder, so smart redundancy — backed by good policies, automation and testing — is the only way to keep traffic flowing when things inevitably break.

SpyCloud Data Shows Corporate Users 3x More Likely to Be Targeted by Phishing Than by Malware

Spotlight: Making the most of multicloud

For IT leaders navigating multicloud environments, success depends on strategic alignment across business units, robust governance frameworks, and proactive security postures. While multicloud offers agility and vendor flexibility, it also introduces challenges in visibility, compliance, and developer productivity. In this special report, you’ll learn how to take advantage of the benefits of using multiple clouds, avoid common pitfalls, and ensure that multicloud is worth the investment.

Ignoring AI in the threat chain could be a costly mistake, experts warn

While some researchers dismiss reports of AI-driven cyberattacks as merely marketing messages, threat intel experts counter that CISOs ignore mounting evidence of AI use in the threat chain at their own peril.