New Research: 64% of 3rd-Party Applications Access Sensitive Data Without Justification

New Research: 64% of 3rd-Party Applications Access Sensitive Data Without Justification

[Download the complete 43-page analysis →] TL;DR A critical disconnect emerges in the 2026 research: While 81% of security leaders call web attacks a top […] The post New Research: 64% of 3rd-Party Applications Access Sensitive Data Without Justification appeared first on Reflectiz ... Read More

No One Was Watching: Simple Web Skimming Campaign That Actually Worked

| | Magecart & Web-skimming
This wasn’t a new kind of attack A large-scale web skimming campaign emerged at the tail end of December 2025. It used dozens of malicious […] The post No One Was Watching: Simple Web Skimming Campaign That Actually Worked appeared first on Reflectiz ... Read More

$8.5 Million Shai Hulud Trust Wallet Crypto Hack

| | Attack Surface, Third Party Risk
Sometimes, even when the dust settles after an earthquake, the aftershocks keep on coming. The ground shaker in this case was September 2025’s self-replicating ShaiHulud […] The post $8.5 Million Shai Hulud Trust Wallet Crypto Hack appeared first on Reflectiz ... Read More

New OWASP No.3: Software Supply Chain Security

Modern software isn’t built from the ground up anymore because that’s inefficient; these days it’s assembled. Developers put apps and websites together using various interdependent […] The post New OWASP No.3: Software Supply Chain Security appeared first on Reflectiz ... Read More

Kaiser Permanente Agrees to Pay Up to $47.5 Million to Settle Web Tracker Litigation

| | Privacy
As one recent article puts it, this case is “a loud alarm … about how the intersection of digital marketing strategies and patient privacy can […] The post Kaiser Permanente Agrees to Pay Up to $47.5 Million to Settle Web Tracker Litigation appeared first on Reflectiz ... Read More
Loading...