Vulnerabilities
Uncovering the Dark Matter of Identity
In modern architectures, identity no longer lives only in the directories and consoles of IAM. The applications, the APIs, the service accounts and the authentication mechanisms t…
Category of intelligence
Vulnerabilities
News about security failures, exploits and vulnerabilities in systems
Vulnerabilities
The first minutes define the response to incidents: discipline, evidence and control
When a security alert appears, it is not always a counter-clock race to win the attacker; often the difference between containing an incident and losing control is in the decision…
Vulnerabilities
Infosters without MacOS and Windows borders attacked by Python and malicious advertising
In recent months, threat response teams have seen a paradigm shift: campaigns that steal credentials and secrets are no longer an exclusive Windows problem and begin to thrive in …
Vulnerabilities
Open VSX takes a decisive step by implementing pre-publication verifications to stop malicious extensions
The Eclipse Foundation has decided to take a significant step to tighten the security of its Open VSX extension repository, the alternative record where accessories compatible wit…
Vulnerabilities
Step Finance Multimillionaire Attack Exposes the Fragility of Critical Treasury
The Step Finance decentralized finance analysis and management platform confirmed at the end of January that it was the victim of an attack that cost it tens of millions in digita…
Vulnerabilities
Mass recognition of Citrix ADC: residential proxies and access routes that prepare the ground for a blast
In the last week, a coordinated recognition campaign was detected that targeted Citrix NetScaler infrastructure (also known as Citrix ADC). According to the analysis published by …
Vulnerabilities
DockerDash: when Docker metadata become executable instructions and the IA is exposed to Meta-Context Injection
A serious vulnerability that affected Ask Gordon, the artificial intelligence assistant integrated in the Docker Desktop and Docker's CLI. Security investigators named the failure…
Vulnerabilities
Metro4Shell: the critical vulnerability that turns your development server into a gateway for attackers
A critical vulnerability on the Metro development server, used by many React Native-based applications, is being exploited in real environments and poses a hard reminder for those…
Vulnerabilities
The IA in the shadow: why the identities of the agents should be the new plane of control
A few years ago, security teams worked to put walls, locks and processes around human and service identities. Today, this model begins to show fissures: a new kind of identity - t…