Attack on Amazon Bedrock-linked AI gateway highlights new cloud security risk
Experts found the attack familiar and consistent with past cloud attack techniques. “Strip off the AI branding and this is a cloud intrusion pattern we’ve…
Category: CISOOnline
Lateral movement risk rises as enterprises emphasize convenience over containment
“A reachable server may still be protected by identity controls, endpoint monitoring, access policies, or other safeguards,” Datta tells CSO. “The practical risk also depends…
GitHub’s public APIs are becoming an enterprise reconnaissance tool
Attackers use a mix of data exfiltration agents with names like GitHub-Company-Scraper, GitHub-Scraper-Tool/1.0., and GitHubAnalytics/1.5,designed to blend into normal data analysis traffic. The bulk of…
My threat feed told me it was ‘Chalubo.’ The binary disagreed
That same bundle cut the other way too, and this is the part worth slowing down on. Down in its relationships sat a threat-actor object…
Cybercriminals exploit India’s tax filing season with a dual-malware campaign
Once the victims are lured into downloading and opening the archives posing as legitimate Income Tax Department utilities, trusted Windows executables are abused to load…
GitHub AI agent leaks private repositories via prompt injection attack
A prompt injection attack can trick GitHub’s preview Agentic Workflows into retrieving content from private repositories and publishing it publicly, exposing a broader risk as…
13 in-demand IT security certifications for higher pay
OffSec Experienced Penetration Tester (OSEP) The OffSec Experienced Penetration Tester is ideal for penetration testers and ethical hackers who need more advanced techniques to sharpen offensive skills…
Watch out for fake support calls in Microsoft Teams
Palo Alto Networks’ security division, Unit 42, is warning of yet another campaign targeting Microsoft Teams users. The new campaign begins with Teams users receiving…
16-year-old KVM flaw allows attackers to escape VMs and take over Linux servers
A critical vulnerability in the Kernel-based Virtual Machine (KVM) module of the Linux kernel allows attackers with root access in a guest VM to execute…
The modern CISO is becoming the next CFO
At some point, every security leader gets asked a version of the same question: Are we good? It tends to arrive when something is at…
Why The Gentlemen ransomware is a test of identity and recovery controls
The Picus report focuses on a Windows-targeting encryptor, but other researchers have reported broader Gentlemen tooling aimed at Linux and VMware ESXi environments. The group…
Zscaler finds autonomous agents succumb to IPI traps
“Every model provider will admit privately that the fundamental architecture of transformer-based reasoning cannot cleanly separate untrusted content from trusted instructions when both share the…