Blog

Extortion crew hijacks Microsoft 365 accounts via fake passkey setup

The Pink cyber extortion crew is tricking employees into giving them access to their Microsoft 365 accounts by faking Entra passkey enrollment requests. The attack The attack starts with a vishing call to an employee. The caller poses as IT and says it’s time to set up a passkey. Everything after that is theater, built to keep the victim occupied while the attacker finalizes everything. The attackers instruct the target to visit a subdomain that … More → The post Extortion crew hijacks Microsoft 365 accounts via fake passkey setup appeared first on Help Net Security.
http://news.poseidon-us.com/TTR8hm

Citrix launches MCP Gateway to secure enterprise AI agents

Citrix has announced updates to its high-performance application delivery and security platform NetScaler, introducing MCP Gateway functionality to allow enterprises to securely route, govern and observe agent traffic to backend Model Context Protocol (MCP) servers. In addition, the company unveiled other enhancements to NetScaler AI Gateway, that extend model routing and token-level usage tracking for LLM traffic. Together, the capabilities enable organizations to govern both sides of enterprise AI from a single platform and dashboard, … More → The post Citrix launches MCP Gateway to secure enterprise AI agents appeared first on Help Net Security.
http://news.poseidon-us.com/TTR5pC

Vectogate debuts platform to secure and govern autonomous AI agents

Vectogate has launched an AI governance platform designed to give organizations centralized control over AI agents as they increasingly take on autonomous tasks with access to sensitive data and internal business systems. The company aims to address one of the key governance challenges posed by enterprise AI. The platform is initially available in private beta, with companies able to apply for early access immediately. AI agents are evolving into autonomous digital employees: they no longer … More → The post Vectogate debuts platform to secure and govern autonomous AI agents appeared first on Help Net Security.
http://news.poseidon-us.com/TTR5mX

Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656)

Microsoft has finally released a security update for its Microsoft Malware Protection Engine, which fixes CVE-2026-50656, the Windows Defender local privilege escalation vulnerability triggered by the RoguePlanet exploit. The vulnerability and the fix CVE-2026-50656 is due to improper link resolution before file access, affects Windows 10 and Windows 11, and may allow authenticated attackers to achieve SYSTEM-level privileges on vulnerable machines by launching low-complexity attacks. The flaw’s existence was publicly revealed on June 10, hours … More → The post Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656) appeared first on Help Net Security.
http://news.poseidon-us.com/TTR2fG

5,811 arrests, $293 million seized over social engineering scams

Criminals who pose as police officers, romantic partners, and business suppliers have built fraud operations that reach across continents. A four-month enforcement campaign against these schemes wrapped up, and police in 97 countries and territories took part. Thousands of arrests The campaign, called Operation First Light 2026, centered on social engineering scams and the money laundering that moves their proceeds. Arrests reached 5,811. Investigators intercepted $293 million in illicit assets. Blocking those funds relied in … More → The post 5,811 arrests, $293 million seized over social engineering scams appeared first on Help Net Security.
http://news.poseidon-us.com/TTQydt