53 results for “EDR”

Northflank, a cloud application hosting platform, disclosed a breach on 30 October 2026 after a Wiz threat alert and told customers to assume all environment variables were decrypted and to rotate secrets. Customers reported unauthorized use of AI API keys. Wiz's "Black October for AI Developer Platforms" report counts at least nine incidents, including Railway, OpenCode, Warp and Lightning AI, and describes LLMJacking, with about 2.5 million Amazon Bedrock calls costing roughly $100,000 in two cases. Northflank has not said how attackers got in.

bleepingcomputer.comarticlePublished and added 31 Oct 2026🛡️ Security

Cathedral, a security startup founded by former DOGE members, used AI agents to find flaws in third-party business software used by Anthropic. It reached sales, HR and IT systems in under 12 hours. Anthropic says no customer chats, model outputs, source code or model weights were reached, and it cut off access the same day. The article also recaps earlier cases of Claude bypassing access restrictions, including Georgia vote counts.

indiatoday.inarticleAdded 1 Nov 2026, published 31 Oct 2026🛡️ Security

SecurityWeek's weekly roundup of 30 October 2026 covers CVE-2026-97631, a 16-year-old buffer overflow in TianoCore EDK II that affects PXE network boot on most servers. It also covers a Cloudflare Workers AI cross-tenant leak caused by an SGLang bug, Anthropic's dispute with Cathedral over a bug bounty intrusion, and fake AI bots probing for secrets. Other items include AI-assisted ransomware (Gold Ogre, Aur0ra), the NIK C2 framework, and North Korean IT worker sanctions.

securityweek.comarticlePublished and added 30 Oct 2026🛡️ Security

Anthropic security incident in which researchers from the startup Cathedral reached Anthropic's commercial, HR and IT systems through vulnerable third-party administrative applications. Exposed data included salaries, job offers, meeting transcripts and Slack messages; Anthropic says customer prompts, source code and model weights were not accessed. Anthropic cut access the same day and kept the apps disabled until vendors patched. The companies dispute whether Cathedral reported all its activity.

en.cryptonomist.charticlePublished and added 30 Oct 2026🛡️ Security

Cisco Talos Incident Response Q3 2026 trends report. Phishing led initial access at 37 percent, with vishing and IT help desk impersonation to get RMM access; public-facing exploitation followed at 33 percent. Ransomware reached 27 percent of engagements (Qilin, Rhysida, Interlock, new VYPR), with EDR killers via BYOVD and WDAC. It also covers Salt Typhoon intrusions using CVE-2023-20198 and BadCandy, attacks on Claude Code credentials, and logging, MFA and secrets recommendations.

blog.talosintelligence.comarticlePublished and added 29 Oct 2026🛡️ Security

Decrypt reports that Cathedral, a startup founded by four former DOGE staffers, says its AI agents found paths into Anthropic's sales, HR and IT systems in under 12 hours through unnamed third-party administrative and sales software. Anthropic says no customer conversations, source code or model weights were reached, and that Cathedral overstated the impact and did not disclose all its activity. The testing ran through a bug-bounty-style program.

decrypt.coarticlePublished and added 26 Oct 2026🛡️ Security

Battledrones v14 adds "Compass Rose", a four-player map with four-way rotational symmetry, to Simon Willison's vibe-coded RTS game, dated 24 October 2026. A single prompt to Claude Opus 4.5 produced the map and extended the WebSocket multiplayer code to four players, with AI filling empty slots. Players join by share link or QR code. New teams are purple and green. The post gives no code or diff.

simonwillison.netarticlePublished and added 24 Oct 2026🧠 AI

LiteLLM version 1.107.0 was published with malware to PyPI and Docker Hub on October 21, for about three hours and roughly 49,000 downloads. Attackers used GitHub CLI OAuth tokens, likely leaked through Claude Code into LiteLLM logs, to disable branch protections, redirect the releaser to a lookalike repository and sign poisoned artifacts. The payload is an infostealer and RAT; Wiz saw Amazon Bedrock abuse. The last clean version is 1.106.2.

securityweek.comarticlePublished and added 23 Oct 2026🛡️ Security

CVE-2026-110936 is an uncontrolled DLL search path flaw (CWE-427) in Siemens Software Center below V4.0.9.8, listed in CISA KEV on 20 October 2026. The post covers CVSS v4.0 8.4 and v3.1 6.7, Siemens' Romulus ClickFix campaign indicators (IPs, domain, hashes, file leads) and a six-step SOC trail using Sysmon, EDR and network records. It separates delivery from DLL load and from compromise.

x.comarticleAdded 24 Oct 2026, published 21 Oct 2026🛡️ Security

tl;dr sec issue #350 is a weekly security newsletter digest. It covers XBOW's six-day Chrome full-chain exploit built with GPT-5.6 Sol, Semgrep's IDOR benchmark metrics, the EntraGoat vulnerable Entra ID lab, Zenity's AWS Bedrock AgentCore IMDS credential theft, Cisco Talos's CAIRN hunting toolkit for AI-integrated malware, the REA reverse-engineering MCP, runZero's sshamble, and a Copilot for Word AI worm.

tldrsec.comarticleAdded 30 Oct 2026, published 15 Oct 2026🛡️ Security

Microsoft Threat Intelligence maps a Chinese-language cybercrime ecosystem: the YAM Store (Storm-3119), an initial access broker that hijacks Microsoft 365/Azure Education tenants and resells accounts, licenses and SharePoint/OneDrive storage, and the Storm-2990 phishing kits (CoGUI, Haozi, Iron Man System) sold via Telegram. It details the five-stage broker pipeline (app-only client-secret abuse, PnP Management Shell service principal, Graph permissions, Cloudflare DNS management), kit evasion features (geofencing, fake CAPTCHA, WebSocket/Telegram live interaction, 2,335+ templates), downstream device-code phishing and card fraud, and lists mitigations such as passkeys, phishing-resistant MFA and Conditional Access. Microsoft's DCU facilitated a disruption with law enforcement; kits sent over one billion messages since January 2026.

microsoft.comarticlePublished and added 14 Oct 2026🛡️ Security

Explains how FedRAMP treats false-positive SCA findings, which still have to be tracked in the POA&M and ConMon. It covers the deviation request (DR) process, the SCA problems of scale and missing context (manifest-based inventories, with 88% of imported code unused), and 30–180 day remediation SLAs. It argues that only high-confidence, function-level reachability that holds from any source is likely to satisfy a 3PAO. It then describes how Endor Labs uses call-graph analysis, SBOM/VEX output and rescanning to document false positives.

endorlabs.comarticlePublished and added 12 Oct 2026🛡️ Security

Cisco Talos's weekly Threat Source newsletter, opening with a risk-management anecdote about network-isolating unpatchable legacy check-printing systems, then disclosing new CAIRN research classifying "A3: AI-Analysis Evasion" — malware authors embedding natural-language prompt-injection text into code/binaries to manipulate AI-assisted malware analysis pipelines. The MANTLEMAZE malware family exemplifies this, pairing such AI-deception attempts (effective ~35% of the time) with BYOVD abuse to disable EDR from kernel space. The issue closes with a roundup of the week's security headlines (Citrix NetScaler CVE-2026-88779, a Danish government data breach, Warlock ransomware) and Talos's current top-prevalence malware hashes/IOCs.

blog.talosintelligence.comarticlePublished and added 8 Oct 2026🛡️ Security

Cisco Talos' CAIRN research classifies a malware archetype called 'A3: AI-Analysis Evasion' — samples that embed natural-language instructions aimed at manipulating LLM-based triage/reverse-engineering pipelines. The post traces the technique's spread and evolution across four confirmed families (FRUITSHELL, PLOTSAFE, HOLLOWCLAD, MANTLEMAZE, plus the related ROZESHELL), from a hardcoded 'ignore this file, it's just prime number generation' comment to templated generation, multi-LLM chat-template spraying, and fake legal/government intimidation text, and includes a controlled test showing the simplest direct-instruction technique shifted LLM verdicts toward benign in ~35% of runs while more elaborate variants often backfired. MANTLEMAZE additionally ships a BYOVD loader abusing the Intel iqvw64e.sys driver (CVE-2015-2291) used by Scattered Spider, BlackByte, and Lazarus Group to kill EDR.

blog.talosintelligence.comarticlePublished and added 8 Oct 2026🛡️ Security

Anthropic's revamped Cyber Verification Program merges the original CVP with Project Glasswing into three tiers: Defense Access, Red Team Access and Specialized Access. All tiers cover Opus 5.5, Sonnet 5.5, Mythos 5.1 and future models, with different verification and fewer cyber blocks at higher tiers. Applicants must accept data retention, and availability differs across the Claude Platform, Vertex AI, Microsoft Foundry and Amazon Bedrock.

securityweek.comarticleAdded 30 Oct 2026, published 7 Oct 2026🧠 AI

Cisco Talos commentary arguing that today's public AI-agent attacks (citing Hugging Face, DSEWiki, and RubyGems incidents) resemble loud, high-volume pentests rather than stealthy red-team operations, and that agent swarms will grow quieter and more OPSEC-conscious over time. The piece lays out concrete resilience steps: rehearsed incident response plans mapped to the incident lifecycle, assumed-breach attack-path mapping (including Active Directory GPO abuse paths), AI-specific tabletop exercises, end-to-end hardening with phishing-resistant MFA (FIDO2/passkeys), broad EDR and east-west traffic visibility, and watching for early noisy indicators like WAF/SQLi spikes and non-browser user agents.

blog.talosintelligence.comarticlePublished and added 7 Oct 2026🛡️ Security

StepSecurity recaps a 48-hour (May 18-19, 2026) software supply-chain attack wave that hit every pipeline layer at once: the Nx Console VS Code extension (2.2M installs) stealing tokens from GitHub/npm/AWS/1Password, the trusted GitHub Action actions-cool/issues-helper hijacked via tag replacement, a trojanized Microsoft durabletask PyPI package pulled within a 35-minute discovery window, a self-replicating Shai-Hulud npm worm, and GitHub's own disclosure that ~3,800 internal source repos were exfiltrated. The piece argues traditional SCA/SAST/EDR/CNAPP tooling missed all of it because none monitor CI/CD runner runtime behavior (e.g., attackers reading /proc/pid/mem to extract secrets) or developer-machine IDE extensions, and ties the incidents to StepSecurity's Harden Runner, Dev Machine Guard, Compromised Actions Policy and Secure Registry controls.

stepsecurity.ioarticleAdded 6 Oct 2026🛡️ Security

AWS Security Blog walkthrough of an identity-aware AI data agent pattern that propagates a real user's OIDC id_token through Amazon Bedrock AgentCore Runtime and Gateway into a Lambda target, which exchanges it server-side (via IAM Identity Center trusted identity propagation) for Lake Formation-scoped Athena credentials. The design deliberately keeps the id_token off the tool schema and inside HTTP headers only, so the foundation model never sees or handles the user's credential, and CloudTrail records the real human via an onBehalfOf AssumeRole entry, letting existing Lake Formation grants govern AI agent queries without rewriting authorization logic in application code. It details the three AgentCore configuration gates (runtime header allowlist, gateway metadataConfiguration.allowedRequestHeaders, Lambda's bedrockAgentCorePropagatedHeaders) that enforce this separation.

aws.amazon.comarticleAdded 7 Oct 2026, published 6 Oct 2026🛡️ Security

Cisco Talos researcher Ashley Shen details a China-nexus espionage campaign (tracked as UAT-11587) targeting government and policy organizations across Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, Myanmar and Syria. The actor deploys a previously undocumented Rust-compiled backdoor, Antino, that uses Microsoft Graph to abuse Outlook (for command exchange via mailbox folders) and OneDrive (for heartbeat and file transfer) as a stealthy C2 channel instead of a dedicated server, delivered via a five-stage HTA/WSF-to-.NET-loader chain and DLL-sideloaded through the signed Microsoft binary GatherOsState.exe. The report also covers social-engineering tradecraft (a fake Gmail attachment-preview widget hosted on Cloudflare Pages, SPF/DMARC spoofing) and ties the cluster to Jewelbug, CL-STA-0049, Earth Alux, Ink Dragon, REF7707 and UNC6384 via infrastructure overlaps.

thehackernews.comarticleAdded 3 Oct 2026🛡️ Security

Proofpoint's Mark Kelly details TA419, a China-aligned espionage group that in July 2026 impersonated former White House OSTP official Lynne Edwards Parker and economist Heidi Crebo-Rediker, and in February 2026 posed as a senior Anthropic employee, to phish US AI policy experts' cloud accounts. The attack chain uses benign-looking invitation emails followed by shortened links leading to a fake OneDrive adversary-in-the-middle page that renders a Chrome login window with the open-source Frameless BitB browser-in-the-browser tool, relaying credentials, MFA codes and session cookies live to the attackers via Cloudflare-fronted, NameSilo-registered domains. Proofpoint assesses the campaign supports Chinese intelligence collection on US AI policy and export-control developments.

helpnetsecurity.comarticleAdded 4 Oct 2026, published 2 Oct 2026🛡️ Security

7ASecurity breaks down five Kubernetes misconfiguration categories their pentesters repeatedly chain into working attack paths: over-permissive RBAC defaults, exposed API server/dashboard/kubelet, missing network policies, unsafe pod defaults (root/privileged containers, host path mounts), and weak admission control. It uses a concrete audit example from CNCF's KEDA project, where the Helm chart's scaledRefKinds setting defaulted to wildcard get access across API groups and resource types, silently undermining KEDA's own Secret-access restriction, plus references to Linkerd mesh audits and the NSA/CISA Kubernetes Hardening Guide.

7asecurity.comarticleAdded 7 Oct 2026, published 2 Oct 2026🛡️ Security

The Hacker News details "CoreBreak," a pattern presented at Black Hat USA 2026 by Stealth researchers Hedi Ingber and Aviyam Ivgi, in which agent harnesses from AWS, Google, and Vercel dispatched tool calls without verifying they came from an actual model turn. AWS's Bedrock AgentCore InvokeHarness API (CVE-2026-18830, CVSS 8.6) let an authenticated remote caller inject a tool-use block that skipped the model entirely; the same model-skipping shortcut persists unpatched in the open-source Strands event loop AWS builds on. Google's ADK for Python (CVE-2026-18236, CVSS 9.3, fixed in 2.5.0) allowed forged tool-confirmation approvals and user-authored function_call events to bypass the LLM, while Vercel's @ai-sdk/harness-codex and harness-opencode (CVE-2026-64650/CVE-2026-64651, CVSS 6.3) let sandboxed code impersonate an approved process to reach host tools; all three CWE-863 authorization gaps were fixed by binding tool execution to a verified model-authorized event rather than trusting tool-call-shaped data.

thehackernews.comarticleAdded 26 Sep 2026🛡️ Security

Talos's weekly Threat Source newsletter opens with a first-person account of a social-engineering scam targeting security professionals: an unsolicited $300 "consultancy" offer that escalates into pressure to extract non-public insights from employers, a pattern the author links to fake-recruiter/trojanized-job-offer schemes. The issue also announces CAIRN, Talos's new open-source, metadata-first toolkit (YARA-based classification tiers) for hunting AI-integrated malware like the autonomous CLOSEDQUORUM C2 implant, and rounds up the week's headlines including the ShinyHunters FBI data claim, fake LastPass installers dropping a kernel-level EDR killer, Japan's takedown of a North Korean (WaterPlum/Contagious Interview) laptop farm, cyberattacks on Colorado water utilities, and a Gemini-driven autonomous breach of three companies.

blog.talosintelligence.comarticleAdded 7 Oct 2026, published 24 Sep 2026🛡️ Security

AWS Security Blog's August 2026 ICYMI roundup covering 20 blog posts, 23 security bulletins, and 17 code samples. The dominant theme is securing agentic AI workloads on Amazon Bedrock AgentCore, alongside IAM/Cognito updates, S3 over-permission remediation, and a bulletin wave featuring prompt-injection consent bypasses in Strands Agents Tools, an IDOR exposing cross-tenant agent memory, credential-disclosure flaws in MCP servers, and RCE issues such as path-traversal-to-root in amazon-ssm-agent and Zip Slip in awsdac.

aws.amazon.comarticleAdded 7 Oct 2026, published 23 Sep 2026🛡️ Security

AWS announces general availability of Gemma 4 (Apache 2.0 open-weight models) on Amazon Bedrock's new OpenAI-compatible bedrock-mantle inference engine within the AWS European Sovereign Cloud, its independently-operated EU-only cloud region (eusc-de-east-1). The post details the security model behind inference: zero operator access to prompts/outputs, zero data retention by default, encryption in transit, IAM-scoped least-privilege access to the inference API, short-lived vs long-lived Bedrock API keys, and CloudTrail/CloudWatch auditing, plus a walkthrough for calling Gemma 4 via the Responses and Chat Completions APIs.

aws.amazon.comarticleAdded 7 Oct 2026, published 17 Sep 2026🛡️ Security

AWS announces general availability of Gemma 4 (Apache 2.0 licensed open-weight model family) on Amazon Bedrock's next-generation inference engine within the AWS European Sovereign Cloud, accessible via an OpenAI-compatible bedrock-mantle endpoint supporting the Responses and Chat Completions APIs. The post walks through authenticating with Bedrock API keys, IAM permission scoping, and sending first inference requests using the OpenAI Python SDK, alongside details on zero-operator-access/zero-data-retention guarantees and in-region (eusc-de-east-1) data residency.

aws.amazon.comarticleAdded 8 Oct 2026, published 17 Sep 2026🧠 AI

Endor Labs blog post demystifying transitive dependencies — libraries pulled in indirectly through direct dependencies — and explaining why they complicate software composition analysis: multiple versions of the same transitive dependency can coexist in a project, it's harder to see what's actually used, and manually forcing an update is risky. It argues reachability analysis (statically stitching first-party call paths through to transitive library code) is the key tool for determining exploitability and for satisfying auditors under PCI DSS, FedRAMP, and EO 14028 SBOM requirements, and walks through a real example where langchain4j pulls a vulnerable JSON library transitively via Redis's jedis client, with the fix being to bump jedis rather than the JSON library directly.

endorlabs.comarticlePublished and added 11 Sep 2026🛡️ Security

An Endor Labs blog post, written by a former JAB Technical Representative, details FedRAMP's Continuous Monitoring vulnerability management requirements: authenticated scanning, monthly dependency inventories, POA&M tracking, and strict remediation SLAs (High CVSS 7.0+ in 30 days, Medium in 90, Low in 180). It also covers FedRAMP's container-specific rules (hardened images, CISA KEV prohibition, pipeline/registry/runtime scanning) and outlines four practical strategies — reachability-based false-positive triage, EPSS-driven risk level adjustments, ROI/complexity-based upgrade prioritization, and developer-side PR gating — before pivoting into an Endor Labs product pitch.

endorlabs.comarticlePublished and added 11 Sep 2026🛡️ Security

Cisco Talos's weekly Threat Source newsletter opens with a personal essay distinguishing burnout from secondary traumatic stress, vicarious trauma, and moral injury among security practitioners, then covers Talos's disclosure of a WebDAV-based infection chain used by Russian-aligned actor UAT-10820 against a Ukrainian government target, delivering the Amatera stealer alongside ZigCryptoStealer and NetSupport Manager, abusing BNB Smart Chain for bulletproof hosting and fake CAPTCHA lures, with a vulnerable driver used to kill EDR. The roundup also flags active exploitation of Cisco Secure Firewall Management Center (CVE-2026-20079, CVE-2026-20316), a ClickFix campaign abusing the Google Visualization API for command and control, and a new Defender zero-day dubbed ShieldCrash.

blog.talosintelligence.comarticleAdded 7 Oct 2026, published 10 Sep 2026🛡️ Security

Long-form critique arguing that autonomous, self-propagating attacks (Morris Worm, SQL Slammer, Emotet, WannaCry) are decades old and that vendor claims of AI-driven "machine speed" attacks are largely hype. It uses CrowdStrike's 2026 average breakout time (29 minutes), the UK AISI evaluation of Mythos Preview (3 of 10 full compromises on an undefended range, at high token cost), and the delay between SOC alert and remediation to argue AI SOCs are a band-aid. It recommends proactive hardening (Credential Guard, LAPS, segmentation, least privilege), automatic EDR isolation and credential rotation on high-fidelity alerts, and realistic assumed-breach exercises.

malwaretech.comarticleAdded 4 Sep 2026, published 3 Sep 2026🛡️ Security

Endor Labs breaks down FedRAMP's 2026 Consolidated Rules, effective July 2026 with December 2026 deadlines, which for the first time formally require cloud service providers to evaluate every detected vulnerability for exploitability and internet-reachability before remediation, replacing the old CVSS-driven POA and M model. It details the required per-vulnerability JSON reporting schema, the 192-day accepted-vulnerability clock, and cites Egnyte's and Rubrik's real-world reachability-driven FedRAMP ConMon programs as evidence the model works at scale.

endorlabs.comarticleAdded 3 Sep 2026, published 26 Aug 2026🛡️ Security

JFrog explains how to propagate end-user identity across the 'second hop' when AI agents call tools through Amazon Bedrock AgentCore Gateway, focusing on On-Behalf-Of (OBO) token exchange to authenticate to JFrog Artifactory as the actual user rather than a shared service credential. It compares OBO against header whitelisting and three-legged OAuth, explaining why shared credentials break audit fidelity, least privilege, and containment for agentic systems, and provides a CLI-driven procedure to configure OBO between AgentCore Identity and Artifactory's MCP server.

jfrog.comarticlePublished and added 21 Aug 2026🛡️ Security

Orca Security lays out a framework for securing AI agents as distinct security objects, arguing an agent's permission set can't be read off its code because it picks tools at runtime, unlike a fixed service account. It details identity-layer fixes from major providers — Microsoft Entra ID's blueprint/service-principal split, Google Cloud's per-agent SPIFFE/X.509 identity with 24-hour certs, and AWS Bedrock AgentCore's token-exchange delegation via RFC 8693 — plus OWASP's AI Agent Security Cheat Sheet practices (tool least privilege, memory isolation, approval gating, attribution logging) and EU AI Act Article 12 logging obligations for high-risk systems.

orca.securityarticlePublished and added 14 Aug 2026🛡️ Security

A reviewer's first-person writeup of the Advanced Red Team Operations Certification (ARTOC) by White Knight Labs, covering a full red team engagement curriculum: building C2 infrastructure with Cobalt Strike and Adaptix, cloud redirectors across AWS, Azure and GCP via CDNs and serverless functions, Active Directory and ADCS exploitation, and kernel and user mode EDR evasion, tested against real enterprise EDR products. The exam is a 48-hour infrastructure build and compromise exercise followed by a 48-hour red team report. The post is a positive testimonial encouraging enrollment rather than a technical walkthrough of any attack.

kuwaitist.github.ioarticleAdded 2 Oct 2026, published 6 Aug 2026🛡️ Security

The Ethereum Foundation's Trillion Dollar Security initiative is funding Freedom of the Press Foundation's continued development of WEBCAT, an open-source browser extension that verifies served front-end code against a developer-signed manifest and a distributed enrollment record, blocking page loads when the code has been tampered with. The grant funds a wallet-integrable verification library, Chromium support research, an independent security audit, and an ERC standard so wallets can detect front-end supply-chain compromise (e.g., altered recipient addresses or signing prompts) without a separate extension. WEBCAT was originally built to protect FPF's SecureDrop from a compromised server serving altered client-side encryption code.

blog.ethereum.orgarticleAdded 29 Sep 2026, published 5 Aug 2026🛡️ Security

Endor Labs analyzes the security risks of AI coding agents running on developer laptops with shell, filesystem, network access and the developer's own credentials, framing the threat as prompt-injection-driven abuse of legitimate agent capabilities (e.g., an agent tricked into exfiltrating .env via a malicious README). It maps six control points — EDR/XDR, sandboxes/containers, AI/MCP gateways, in-agent hooks, package firewalls, and secrets scanning/PR controls — arguing that in-agent hooks (deterministic allow/deny/ask decisions on proposed actions before execution) are the only point that intercepts model intent before it becomes a shell command, and promotes Endor Labs' own hook-based AI Coding Agent Governance and Package Firewall products as the implementation.

endorlabs.comarticleAdded 3 Sep 2026, published 31 Jul 2026🛡️ Security

Orca Security explains what an AI-BOM is (an inventory of models, datasets, prompts, embeddings, and external AI services an AI system depends on) and why discovery — not format — is the hard problem: components arrive via notebooks and managed consoles rather than dependency manifests. It surveys the two competing standards, CycloneDX's ML-BOM (v1.7, standardized as ECMA-424 2nd edition) and SPDX 3.0's AI/Dataset profiles, walks through failure modes like unrecoverable model lineage, stale embeddings outliving deleted source documents, and silent version drift on managed endpoints (e.g. Azure OpenAI's auto-update-to-default), and ties the practice to EU AI Act Annex IV technical-documentation requirements and the NIST AI RMF. It ends by describing Orca's agentless SideScanning-based AI inventory across Azure OpenAI, AWS Bedrock, SageMaker, and Vertex AI.

orca.securityarticlePublished and added 31 Jul 2026🛡️ Security

Wiz Research details how its Agentless Workload Detection uncovered active exploitation across a range of cloud/network appliances and services: FortiGate zero-day account creation (CVE-2026-24858), FortiBleed credential stuffing against ~75,000 devices, PAN-OS admin-account compromise (CVE-2026-0257) and CaptivePortal exploitation (CVE-2026-0300), a critical pre-auth BeyondTrust RCE (CVE-2026-1731), the memory-disclosure bug MongoBleed (CVE-2025-14847), Redis replication-abuse for RCE, a Zabbix instance compromised via default credentials, a Linux page-cache LPE called CopyFail, malicious npm package installs (@asyncapi/specs), and WordPress wp2shell webshells (CVE-2026-63030, CVE-2026-60137). It illustrates concrete detection logic (e.g. Redis replication target rules, unusual-executable HTTP access detections) built from agent-free log collection on virtual appliances that traditionally lacked EDR coverage.

wiz.ioarticleAdded 3 Sep 2026, published 21 Jul 2026🛡️ Security

Orca Security explainer defining Identity Threat Detection and Response (ITDR) for cloud environments, distinguishing it from IAM, PAM, EDR, and CIEM as a runtime behavioral-detection layer for identity abuse rather than a preventive/posture control. It covers cloud-specific attack patterns like leaked AWS access-key abuse, AssumeRole/PassRole privilege escalation, OAuth consent phishing, and federation/token abuse, and details how ITDR baselines identity behavior (especially machine/non-human identities) using cloud audit logs like CloudTrail to detect impossible travel and anomalous role assumption, ending with Orca's agentless CIEM+ITDR platform pitch.

orca.securityarticlePublished and added 3 Jul 2026🛡️ Security

Wiz breaks down Executive Order 14409 ('Securing the Nation Against Advanced Cryptographic Attacks') and OMB memorandum M-26-15, which set accelerated federal deadlines for migrating High Value Assets and High Impact Systems to NIST-approved post-quantum cryptography (key establishment by 2030, digital signatures by 2031). It covers requirements for automated cryptographic inventories, forthcoming NIST/CISA Cryptographic Bill of Materials (CBOM) guidance, Harvest-Now-Decrypt-Later risk prioritization, FedRAMP/FAR Council contractor compliance rules, and comparable international timelines (EU, Japan, Australia, India), before pitching Wiz's own CBOM/PQC readiness tooling.

wiz.ioarticleAdded 3 Sep 2026, published 2 Jul 2026🛡️ Security

A Huntress blog post explaining how the Ransomware-as-a-Service (RaaS) model splits ransomware operations into specialized roles - operators who build and maintain malware/leak sites, affiliates who conduct intrusions, and initial access brokers who sell footholds - citing Huntress 2026 Cyber Threat Report data showing Akira, Medusa, Qilin, and Ransomhub accounted for over half of observed ransomware incidents. It walks through a real Huntress SOC incident where attackers pivoted from a compromised SonicWall VPN appliance through privilege abuse, Cloudflared/OpenSSH persistence, credential theft, and shadow copy deletion before deploying Akira ransomware, and recommends monitoring VPN/RDP access, MFA, and SIEM/EDR/ITDR correlation to catch pre-encryption staging activity.

huntress.comarticleAdded 3 Sep 2026, published 1 Jul 2026🛡️ Security

Huntress details ConsentFix, an evolution of ClickFix that abuses Microsoft 365 OAuth sign-in flows: victims are phished via password-protected Dropbox or DocSend lures, shown a fake Microsoft sign-in page, and tricked into dragging a localhost callback link into their browser, which exfiltrates OAuth tokens and hijacks the session without needing a password or triggering MFA. A cybercrime forum post published the full technique with working code and infrastructure such as Cloudflare Pages, workers.dev, and Pipedream webhooks, and showed attackers using LinkedIn, ZoomInfo, and Hunter.io to profile victims before sending lures.

huntress.comarticleAdded 3 Sep 2026, published 29 Jun 2026🛡️ Security

StepSecurity details the fast-moving Miasma (npm) and Hades (PyPI) supply-chain worm campaigns, which shifted the execution trigger from install-time lifecycle scripts to open-time and import-time: Miasma uses a "Phantom Gyp" technique via a malicious binding.gyp that fires during native npm builds, while Hades embeds an obfuscated hook in __init__.py that downloads a Bun runtime and reads secrets from process memory on import. The post explains why EDR, registry gateways, and SCA scanners all miss these artifacts (they aren't declared dependencies and don't touch disk in classic ways), then pitches StepSecurity's Dev Machine Guard "Suspicious Files" feature, which scans developer machines for known attack artifacts using centrally maintained detection rules.

stepsecurity.ioarticleAdded 3 Sep 2026, published 18 Jun 2026🛡️ Security

BleepingComputer covers Varonis's SearchLeak research, a three-stage attack chain (CVE-2026-42824, now patched) affecting Microsoft 365 Copilot Enterprise Search. Attackers craft a URL with a malicious 'q' parameter to prompt-inject Copilot into searching a victim's mailbox/OneDrive/SharePoint, exploit an HTML-rendering race condition to slip an unsanitized img tag past output neutralization, then abuse an SSRF in Bing's "Search by Image" feature to bypass CSP and exfiltrate the stolen data (emails, passwords, meeting details) to an attacker-controlled server via a single click, no user typing required.

bleepingcomputer.comarticleAdded 26 Sep 2026, published 15 Jun 2026🛡️ Security

Aikido argues that EDR and corporate/remote proxies cannot catch supply chain malware because the malicious code executes with full trust inside legitimate package managers at install time. It walks through two real incidents: the March 2026 hijack of the axios maintainer's npm account (a new dependency's postinstall script dropped a cross-platform RAT and self-deleted, indistinguishable from a normal npm install), and a backdoor added to three versions of Microsoft's Python durabletask package that harvested credentials across AWS, Azure, GCP, Kubernetes, and HashiCorp Vault, propagated via SSM and kubectl exec, and triggered rm -rf / on machines with Israeli/Iranian locale settings. It concludes that this class of attack needs host-based, always-on, install-time protection rather than network-perimeter or behavioral-anomaly tooling — pitching Aikido's Device Protection product.

aikido.devarticleAdded 3 Sep 2026, published 2 Jun 2026🛡️ Security

Aikido Security argues that MDM (Jamf, Kandji, Intune) and EDR (CrowdStrike, SentinelOne) operate at the OS/application layer and are blind to the modern developer attack surface: npm/pip package installs with postinstall hooks, VS Code/IDE extensions, browser extensions, and MCP servers used by AI coding tools. It walks through the Nx Console extension compromise that exposed 3,800 GitHub repos, the Cyberhaven and Vercel/Context.ai OAuth-token browser-extension chain, the Mini Shai-Hulud npm worm, and the postmark-mcp malicious MCP server as evidence, then recommends a 48-hour minimum package age, disabling postinstall scripts by default, auditing extensions, and monitoring AI tool installs (pitching Aikido Device Protection/Safe Chain as the fix).

aikido.devarticleAdded 3 Sep 2026, published 28 May 2026🛡️ Security

Aikido Security's analysis of GitHub's disclosed breach of roughly 4,000 private repos, attributed by GitHub to a vulnerability in the Nx Console VS Code extension (2.2M installs, verified publisher) that was briefly backdoored to silently harvest credentials via .env file access. The post argues that install-count and verified-publisher trust signals are now the actual attack surface, since malicious versions only need minutes on the marketplace before removal, and pitches Aikido's on-device Device Protection agent (real-time malware feed blocking plus a default 48-hour minimum package/extension age) as a control EDR can't provide since it doesn't inspect interpreted extension/package code.

aikido.devarticleAdded 3 Sep 2026, published 20 May 2026🛡️ Security

Huntress SOC writeup detailing three real incidents stemming from exposed RDP: a healthcare org's internet-facing RDP port (3389) hit by opportunistic scanning, an RDWeb portal re-exploited by the same attacker a day after eviction using a custom cross-platform reverse tunnel and credential harvester, and a SonicWall VPN compromise where the attacker used cheap bulletproof hosting (Hostinger, Freakhosting) then manually re-enabled RDP via registry edits and netsh firewall rules before running Advanced IP Scanner for lateral movement. The piece argues these are not zero-days but recurring misconfigurations, and recommends firewalling RDP, closing/rotating exposed entry points quickly, and feeding VPN/firewall logs into SIEM alongside EDR for visibility.

huntress.comarticleAdded 3 Sep 2026, published 19 May 2026🛡️ Security

Huntress SOC writeup on VPN compromise as the dominant initial-access vector, citing that ~70% of intrusions their SOC catches begin with attacker authentication through VPN. It walks through real incidents: a compromised FortiGate VPN leading to deployment of publicly available GitHub tools BlueHammer, RedSun, and UnDefend (attributed to threat actor Nightmare-Eclipse); a VPN-originated Play ransomware attempt stopped by EDR; missing VPN logs hampering investigation; and a SonicWall SSLVPN credential compromise that led to BYOVD-based defense evasion due to missing MFA and account segmentation. It closes with a prioritized remediation checklist (enforce MFA, audit privileged accounts, disable legacy accounts, centralize logging).

huntress.comarticleAdded 3 Sep 2026, published 17 Apr 2026🛡️ Security

Huntress analyzes the March 2026 Stryker incident, in which attackers linked to the pro-Iran group Handala reportedly compromised Stryker's Microsoft Intune/MDM environment and issued a mass 'Remote Wipe' command factory-resetting up to 200,000 corporate and BYOD devices, while also exfiltrating 50TB of R&D data. The piece explains why this 'weaponized remote wipe' differs from ransomware (no restore key, full rebuild required), details the supply-chain/patient-safety fallout for NHS orders, and gives five concrete defenses: locking down MDM/RMM/EDR consoles as crown-jewel assets, requiring multi-admin approval for bulk device actions, moving from MDM to MAM for BYOD, building out-of-band IR comms, and rehearsing a fleet-scale 'day zero' restore.

huntress.comarticleAdded 3 Sep 2026, published 8 Apr 2026🛡️ Security

Huntress's Principal EDR Product Researchers explain how their Managed EDR collects telemetry differently on Windows (kernel callbacks, ETW, Event Log, AutoRuns point-in-time surveys), macOS (Apple's Endpoint Security API, TCC/Gatekeeper constraints, code-signing enrichment), and Linux (eBPF hooks, file-activity-as-persistence-proxy), and why full feature parity isn't always pursued. It also details their Ransomware Canaries capability (260+ confirmed-ransomware alerts in 2025 on Windows) and why canaries aren't yet prioritized on macOS/Linux given the current threat landscape (citing Akira SMB-based remote ransomware, EvilQuest/ThiefQuest VirusTotal sample inflation, and a non-viable 2023 macOS LockBit variant noted by Objective-See's Patrick Wardle).

huntress.comarticleAdded 3 Sep 2026, published 13 Jan 2026🛡️ Security

Recap of Huntress's Tradecraft Tuesday webinar featuring CISO Chris Henderson and Brian Milbier, covering active mass-exploitation of a critical React remote code execution flaw (CVE-2025-55182, dubbed "React2Shell") that is dropping cryptominers, the PeerBlight Linux backdoor, tunneling tools, and a Kaiji botnet variant, with GreyNoise data showing exploitation volume approaching Log4Shell scale. It also details the ClickFix technique for tricking users into self-executing malware via fake "human verification" prompts, and "living off trusted sites" phishing that abuses legitimate PayPal/DocuSign/OneDrive senders to bypass reputation-based email filters, closing with a practical hardening checklist (MFA, passkeys, password managers, credit freezes) and coverage of AI-driven sextortion, deepfake romance scams, and pig-butchering fraud.

huntress.comarticleAdded 3 Sep 2026, published 23 Dec 2025🛡️ Security

Huntress details a sharp 2025 rise in hypervisor-targeted ransomware (from 3% to 25% of malicious-encryption cases), driven mainly by the Akira group abusing ESXi and Hyper-V management interfaces to bypass endpoint EDR and encrypt VMs at scale. It provides hardening guidance: local non-AD ESXi accounts, MFA, jump boxes, least privilege, VMkernel.Boot.execInstalledOnly and lockdown mode, patching against CVE-2024-37085 and disabling exposed SLP (port 427, abused by ESXArgs), immutable 3-2-1 backups, and forwarding ESXi logs to a SIEM.

huntress.comarticleAdded 3 Sep 2026, published 8 Dec 2025🛡️ Security