Sophos ZTNA unlocks SaaS app control and so much more
For many of you, Sophos ZTNA has been a staple in your security stack for a few years now, providing...
Many
Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap
Attackers found a Microsoft 365 sign-in path that many MFA policies were not watching. A password spray campaign targeting Azure...
Factoring RSA Keys with Many Zeros
Factoring RSA Keys with Many Zeros Interesting research on a new class of weak RSA keys: keys with lots of...
Surviving the Mythos Era: Richard Bejtlich on the Case for NDR
Despite the abundance of telemetry at analysts’ disposal, many security operations teams struggle to answer a few basic questions during...
US should take 50% stake in major AI firms, says Bernie Sanders
Sovereign wealth funds are not a new idea: Many administrations across the world have implemented them, notably Norway which has...
Protecting legacy OT systems against modern cyberthreats
Critical Infrastructure Many manufacturing plants depend on OT systems that stay in service for many years. That long run can...
144 Mastra npm Packages Compromised via Hijacked Contributor Account
As many as 144 npm packages associated with the Mastra namespace ("@mastra/*"), a popular open-source JavaScript and TypeScript framework for...
Making Vulnerable Drivers Exploitable Without Hardware – The BYOVD Perspective
1 Introduction This article provides a technical analysis of how many Windows kernel mode drivers can be interacted with from...
Why Agentic AI Is Security’s Next Blind Spot
Agentic AI is already running in production environments across many organizations today. It is executing tasks, consuming data, and taking...
Cisco Introduces Model Provenance Kit to Strengthen AI Supply Chain Security
Organizations are rapidly adopting AI models, but many still lack visibility into where those models come from or how they’ve...
Shadow Admins in Active Directory: Hidden Privilege Paths Attackers Exploit
What Are Shadow Admins in AD? A common problem we encounter within many customer AD environments are accounts that, at...
The Anthropic Mythos, Project Glasswing, and the Illusion of Patch-Based Security
Project Glasswing is a reminder of something many in the federal cybersecurity community already know but don’t always say out...
Enterprise Security for Your Brand’s YouTube Channel
For many businesses, a YouTube channel is far more than a video-sharing platform. It is a critical marketing asset, a...
ClickFix finds a new way to infect Macs
ClickFix campaigns are looking for alternatives now that many Mac users have been made aware of the dangers of pasting...
Kubernetes Strategy: When It’s a Fit and Who Should Run It
Many organizations that use containers now run at least some production workloads on Kubernetes, and it comes up in...
