Authorization

A critical vulnerability (CVE-2025-3464) was discovered in ASUS Armoury Crate, a popular system management tool for ASUS Windows PCs. This flaw allows attackers with local access to escalate privileges and gain full administrative (SYSTEM) control over the affected machine.

Identity and Access Management (IAM) is a comprehensive framework of business processes, policies, and technologies designed to manage digital identities and control user access to an organization’s resources. The core purpose of IAM is to ensure that the right individuals—whether employees, contractors, partners, or devices—have the appropriate access to technology resources at the right times and for the right reasons, while preventing unauthorized access.

Citrix recently addressed two critical vulnerabilities in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway), both of which pose significant risks to enterprise networks if left unpatched.

Teleport, an open-source platform for secure access to infrastructure, issued a warning on Friday about a critical-severity vulnerability that could allow remote attackers to bypass standard authentication controls.

AT&T agreed to a $177 million settlement to resolve class action lawsuits stemming from two major data breaches, far greater than the estimated $800 thousand ransomware demand. So why did AT&T choose to refuse the cybercriminals' demands?