Tech News
Curated cybersecurity and IT intelligence for business leaders. Stay informed on the threats, trends, and innovations that matter to your organization.
Microsoft links Mastra AI supply chain attack to North Korean hackers
Microsoft has attributed a recent Mastra AI supply chain attack that compromised more than 140 npm packages to the North Korean hacking group Sapphire Sleet.
M365 Copilot SearchLeak: Your prompt injection attack surface just got bigger
Researchers demonstrated a proof-of-concept attack against Microsoft’s M365 Copilot Enterprise, underscoring parameter-to-prompt injections as a broad emerging threat.
Hackers mass-exploiting Gravity SMTP flaw to steal API keys from 100,000 WordPress sites
Wordfence blocked 17M+ attempts to exploit a Gravity SMTP bug that leaks API keys and system data from WordPress sites without authentication.
Microsoft says web-enabled AI agents can trigger host-level RCE
Microsoft’s AutoJack research shows how a malicious webpage rendered by an AI browsing agent can reach local MCP services and execute arbitrary processes on the underlying system.
FortiBleed: Analysis of a Global Access Broker Campaign
SpyCloud researchers uncovered threat actor infrastructure tied to a campaign actively exploiting Fortinet devices to broker network access to global victims.
CISA warns Fortinet customers as FortiBleed hits 86,644 FortiGate devices
The U.S. Cybersecurity and Infrastructure Security Agency urged Fortinet customers with FortiGate appliances to take immediate steps to secure against ongoing malicious activity.
Want tailored threat intelligence for your business?
Sentinel Ridge clients receive monthly executive briefings with actionable security insights.