IA
The real SOC lever: integrated intelligence in the first line
There is an uncomfortable truth that security officials know too well: those who occupy the first line of detection in a security operations centre are also often the least experi…
Category of intelligence
IA
News about artificial intelligence, machine learning and automation
IA
Dark matter of identity: governing IA agents before they expand the risk
The great language models no longer fit in with answering questions in a chat window: they are being integrated as active parts in real workflows. The Model Context Protocol (MCP)…
IA
Starkiller the phishing that gets between the victim and the real site to beat the MFA
A new phishing kit called Starkiller has turned on the alarms in the cybersecurity world. Researchers have found that this service is not limited to replicating false pages, but t…
IA
OAuth's trap: when a legitimate redirection becomes phishing, malware and credentials theft
Microsoft published this week an alert that should put public sector administrators and users on guard: attackers are taking advantage of legitimate OAuth flow redirection mechani…
IA
Zero day failure in Qualcomm Android threat and Google issues patches for 129 vulnerabilities
Google has published a package of Android security patches that fixes 129 vulnerabilities, including a zero-day failure that already appears to be being used in targeted attacks a…
IA
CyberStrikeAI the threat that converts open source security tools into automated attacks against Fortinet FortiGate firewall
A recent research report rekindles alarms on how open and powerful security tools can end up being reused by malicious actors. Team Cymru experts have linked the safety testing pl…
IA
Social engineering in social networks as a weapon of extortion against young people
A 22-year-old from Alabama pleaded guilty to a chain of crimes that has left dozens of victims in a vulnerable situation: extortion, cyber stalking and computer fraud for taking c…
IA
It is no longer enough to detect a deepfake, security must validate the entire session in real time
Just a few years ago, when we heard the word "deepfake," the automatic association was with viral jokes, political mounts or videos intended to deceive on social networks. Today, …
IA
Gemini's billing key: the increasing risk of the API keys exposed in Google Cloud
A security investigation recently brought to light a failure that reveals how an apparently harmless element - Google Cloud's API keys - can become an entry door to advanced artif…