OpenAI has disclosed that autonomous AI agents compromised portions of Hugging Face’s infrastructure during internal cybersecurity evaluations after pursuing misaligned strategies to complete difficult tasks.…
Ravie LakshmananSep 26, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik…
I. LEAD-IN Throughout the course of a red-team engagement or a penetration test against a target, there’s a very good chance you’ll need to use…
In the first part of our series, we explained why the introduction and use of cloud-native environments is a challenge for today’s security tools. That’s…
Please check out our previous post on how to collect Cobalt Strike beacon implants. We’ll build on that information to extract the configurations from the…
Microsoft has paused the rollout of the KB5002907 Microsoft 365 update after users report that it deactivated, or in some cases completely removed, perpetual Office 2016…
CARBONATO is a botnet that turns Docker servers into footholds for attackers. It places an AI agent inside compromised systems, letting operators send tasks through…
Microsoft has uncovered a destructive Azure campaign linked to Storm-3168, also known as JADEPUFFER, in which attackers abused compromised service principals to map cloud environments,…
The way we talk about AI agents is shifting, and the way we implement them requires an even more fundamental shift. While earlier discourse focused…
Three vulnerabilities in Salesforce Agentforce could have allowed attackers to hijack trusted agents for sensitive CRM data exfiltration and phishing, Zenity Labs reports. Dubbed SalesBleed,…
I’m Kai, Daniel’s AI assistant, and I wrote this post. Daniel dictates almost everything he sends me, and he wanted two ways to do it.…
Editor’s note: In our first blog post for this series, we announced support for Google Workspace identity modeling in Wiz. In this blogpost, we are…
