InfoSecBulletin Cybersecurity for mankind

Attackers are using Microsoft’s OAuth 2.0 Device Authorization Grant (device code) flow in a campaign to take control of Microsoft 365 accounts. The attack starts with a fake email that looks like it’s approving a quote from a supplier. The message has two parts: an HTML file that shows an …

Cisco on Monday told customers about a new SD-WAN product flaw used in attacks. The flaw, called CVE-2026-20262, is a medium-severity issue that lets files be written anywhere in the Catalyst SD-WAN Manager. “This file could later be used to elevate to root,” Cisco explained, adding, “To exploit this vulnerability, …

Every American data center story these days follows almost the same pattern. Someone has the chips, someone has the cash, and then the project just waits for power. That’s why Oracle is funding its own gas power plant in the New Mexico desert for OpenAI, and why China avoided the …