Cloud & Identity Security Writer

Aisha Noor, page 2

Aisha covers identity providers, SaaS security posture and the long tail of cloud misconfiguration. She maintains our hardening guide series.

35 articlesUpdated 28 Sep 2026Page 2 of 2

Identity securitySaaS postureCloud hardeningLinkedIn

Articles by Aisha Noor

ThreatsIndustrial & OTCritical
SAP Security Patch Day Addresses Critical NetWeaver Message Server Authentication Bypass
SAP released security updates for CVE-2026-58240, a CVSS 9.6 authentication bypass in NetWeaver AS Java/ABAP Message Server that permits enterprise takeover.
Aisha Noor14 Sep 20268 min read
NewsCloud & SaaS
Microsoft September 2026 cumulative updates trigger Remote Desktop Services deadlock across Windows Server
Enterprise sysadmins face operational paralysis as September 2026 security updates trigger Remote Desktop Services freezes across Windows Server 2019, 2022, and 2025.
Aisha Noor14 Sep 20265 min read
ThreatsCloud & SaaS
Microsoft traces passkey-themed lures to persistent Microsoft 365 cloud compromise
Microsoft says attackers are using passkey and SSO update pretexts to capture sessions, add MFA methods and collect Microsoft 365 data.
Aisha Noor13 Sep 20266 min read
ThreatsTelecom & MediaHigh
Attackers exploit Google Play Early Access loop to distribute deceptive malware apps to millions
Bitdefender reveals threat actors are exploiting Google Play’s Early Access program to bypass user reviews and star ratings, pushing deceptive apps with over 1M downloads.
Aisha Noor12 Sep 20265 min read
NewsBanking & Fintech
StreamRAT Android banking trojan targeted 570,000 European users through deceptive Meta streaming ads
ThreatFabric uncovers StreamRAT, a sophisticated Android banking trojan promoted via fraudulent Meta TV streaming ads, hijacking Accessibility services to drain accounts.
Aisha Noor12 Sep 20265 min read
ThreatsCloud & SaaSCritical
Attackers chain dual JFrog Artifactory vulnerabilities to hijack build pipelines and plant backdoors
Wiz Research caught threat actors chaining two JFrog Artifactory flaws (CVE-2026-42018 & CVE-2026-42016) to forge admin tokens and compromise enterprise software repositories.
Aisha Noor11 Sep 20266 min read
InsightsCloud & SaaS
Entra ID's February 2027 Sign-In Block: A Dated Migration Plan for the Accounts That Will Break
Microsoft retires SMS and voice MFA on 1 February 2027 with a blocking passkey prompt and no opt-out. Here is a dated plan for service accounts, break-glass and phoneless users.
Aisha Noor11 Sep 20266 min read
InsightsCloud & SaaS
Nearly 1 in 10 Exposed LiteLLM AI Gateways Leaked Master Admin Keys
Wiz Research discovered that 10% of internet-facing LiteLLM AI proxy gateways accepted the default documentation admin key sk-1234, leaking upstream model keys and cloud IAM tokens.
Aisha Noor10 Sep 20265 min read
GuidesIndustrial & OT
Playbook: hardening the edge appliance you cannot put an agent on
Two of this year’s fastest CISA remediation deadlines hit devices that cannot run EDR. A practical checklist for the class attackers reach for first.
Aisha Noor8 Sep 20267 min read
InsightsCloud & SaaS
MFA failed in 84% of incident responses. The problem is the session, not the factor
With 99% of SaaS compromises originating at the identity provider, MFA is no longer the control organisations think they bought. Here is what changed.
Aisha Noor6 Sep 20267 min read
ThreatsBanking & FintechHigh
One AiTM phishing campaign compromised 35,000 users across 13,000 organisations in three days
Adversary-in-the-middle phishing now defeats standard MFA at industrial scale. Microsoft tracked a single April 2026 campaign spanning 26 countries in 72 hours.
Aisha Noor2 Sep 20267 min read