…Amazon says the attacker gained access by socially engineering package maintainers, and then published malicious updates that were automatically distributed to unsuspecting users. The attribution to Sapphire Sleet has medium confidence and…
…AI features embedded in approved SaaS tools activated without IT review, scripts and automations built outside approved environments, agents spun up by individual teams with no central visibility. It isn't necessarily…
…KEV catalog, whether the asset is publicly exposed online, whether exploitation can be automated for large-scale attacks, and whether successful exploitation grants attackers partial or total control of the targeted system…
…The CVE-2026-50746 vulnerability affects UniFi Connect Application (versions 3.4.16 and earlier), a management software suite that Ubiquiti customers can use to automate and manage commercial building operations (including…
…Persistence is established through systemd services on Linux and LaunchAgents on macOS, while GitHub workflow and Claude/MCP configuration files are also used. Socket’s report lists all affected packages and versions…
…Every transaction used an identical hardcoded fee rate of 30 satoshis per virtual byte and left no change output, making Galaxy believe the attackers used an automated tool. "Signature: every sweep paid…
…But the instruction channel is exactly where the under-specification lives, and a specification complete enough to exclude every prohibited action is no longer delegation. It is a script, and a script…
…Secure AI By Design Shadow AI and agent sprawl are outpacing your security team's ability to handle them. Token Security discovers every agent, maps risky access, and automatically enforces intent-based…
…scripts, assist credential harvesting, analyze stolen information and personalize extortion communications, allowing relatively small attack teams to scale their operations. The GLOBAL GROUP ransomware operation introduced an AI chatbot to automate ransom…
…The flaw stems from inconsistent state handling in NGINX’s internal script engine, which processes rewrites in two passes: one to calculate the amount of memory to allocate, and one to copy…