Cybersecurity
Uncovering the Dark Matter of Identity
In modern architectures, identity no longer lives only in the directories and consoles of IAM. The applications, the APIs, the service accounts and the authentication mechanisms t…
Category of intelligence
Cybersecurity
News related to computer security, privacy and data protection
Cybersecurity
Sysmon comes integrated into Windows 11 for Advanced Telemetry Insider without manual facilities
Microsoft has started natively integrating Sysmon's functionality into some Windows 11 facilities within the Windows Insider program. This is a relevant change: instead of relying…
Cybersecurity
The first minutes define the response to incidents: discipline, evidence and control
When a security alert appears, it is not always a counter-clock race to win the attacker; often the difference between containing an incident and losing control is in the decision…
Cybersecurity
Infosters without MacOS and Windows borders attacked by Python and malicious advertising
In recent months, threat response teams have seen a paradigm shift: campaigns that steal credentials and secrets are no longer an exclusive Windows problem and begin to thrive in …
Cybersecurity
Open VSX takes a decisive step by implementing pre-publication verifications to stop malicious extensions
The Eclipse Foundation has decided to take a significant step to tighten the security of its Open VSX extension repository, the alternative record where accessories compatible wit…
Cybersecurity
Mass recognition of Citrix ADC: residential proxies and access routes that prepare the ground for a blast
In the last week, a coordinated recognition campaign was detected that targeted Citrix NetScaler infrastructure (also known as Citrix ADC). According to the analysis published by …
Cybersecurity
Commitment of Credentials and the Everest Threat Expose Weaknesses on Iron Mountain
The news that Iron Mountain was mentioned in the leaks portal of the Everest group turned on the alarms of many organizations, so it is appropriate to separate the confirmed from …
Cybersecurity
Metro4Shell: the critical vulnerability that turns your development server into a gateway for attackers
A critical vulnerability on the Metro development server, used by many React Native-based applications, is being exploited in real environments and poses a hard reminder for those…
Cybersecurity
The IA in the shadow: why the identities of the agents should be the new plane of control
A few years ago, security teams worked to put walls, locks and processes around human and service identities. Today, this model begins to show fissures: a new kind of identity - t…