Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How Financial Services Teams Should Secure AI Agents in 2026

Your fraud detection agent scores 30,000 transactions per hour. Your KYC agent processes identity verifications against government watchlists. Your customer service chatbot resolves disputes and initiates balance transfers. Each agent runs on Kubernetes with inherited service account permissions that span payment APIs, customer databases, and compliance systems. Now imagine one of those agents is compromised through a prompt injection embedded in a customer support ticket.

Deepfake Fraud in Business - Can You Trust What You See?

Razorthorn has worked with wide range of technically savvy clients who are confident they would spot a fake, but confidence is exactly what makes deepfake fraud so effective. In 2024, a finance manager at engineering firm Arup transferred $25 million to fraudsters after taking part in a video call with what appeared to be his CFO and several colleagues. Every person on that call was fabricated. None of it was real.

Axios CVE-2026-40175: a critical bug that's... not exploitable

It’s been a chaotic few weeks for Axios. First, a major supply chain attack put the package under scrutiny. Then, just days later, headlines started appearing about a “critical 10/10 vulnerability” that could lead to full cloud compromise. If you’ve read the coverage, you’ve probably seen claims like: That sounds bad. But when you look closely at how this vulnerability actually behaves in real environments, the story changes.

How to Configure Jira OAuth SSO Integration with Google Workspace (Apps) | Step-by-Step Guide

Streamline user authentication in Jira by enabling secure Single Sign-On (SSO) with Google Workspace (Apps) as your Identity Provider (IdP). Using the miniOrange OAuth/OIDC SSO app, you can provide seamless one-click login while keeping user identity centralized and secure. In this video, we guide you through the complete setup process, from creating OAuth credentials in the Google Cloud Console to configuring Jira for SSO. You’ll learn how to set up authorized redirect URIs, obtain client credentials, and map user attributes for a smooth authentication experience.

Jira User Management Automation: Auto-Deactivate, Suspend & Delete Inactive Users | miniOrange

Is your Jira user directory cluttered with inactive accounts? Paying for licenses that no one is using? In this video, we walk you through the complete user lifecycle management workflow using the miniOrange Automated User Management app for Jira Cloud, from detecting inactivity to auto-removing access, suspending long-term idle users, and deleting accounts that never returns.

Diving Into Quasar RAT: TTPs, IoCs and more

Quasar, crafted in the C# programming language, is a publicly accessible and open-source Remote Access Trojan (RAT) designed for Microsoft Windows operating systems (OSs). This creation comes courtesy of the GitHub user MaxXor and resides as a publicly hosted repository on GitHub. While its utility extends to legitimate applications like enabling remote assistance from an organization’s helpdesk technician, Quasar is being exploited by APT actors for cybercrime and cyber espionage endeavors.

What Composable Apps Mean for the Web3 Ecosystem

Composable applications are becoming a defining feature of how Web3 ecosystems develop and scale. These apps are built to work together rather than operate in isolation, allowing developers to reuse existing components and users to benefit from interconnected functionality.

How Modern Access Control Is Changing the Way We Secure Buildings

The way we manage who gets into a building has changed significantly over the past decade. Traditional lock-and-key systems are giving way to smarter, more flexible solutions that offer greater control and visibility. Understanding how these systems work can help organisations make better decisions about their security infrastructure.