/
attack_type:misconfiguration × criticity:medium × limpar

Resultados

2 casos · pág. 1/1

grahamcluley.com · medium

Smashing Security #486: vibe-coded NZ shop site exposed, Flock ALPR cameras hacked, plus Base44, Odido and North Korea fake-interview links

Episode 486 of the Smashing Security podcast (host Graham Cluley, guest Dave Bittner) covers two main stories. An Auckland store's vibe-coded website reportedly let the public edit its inventory, and bogus listings appeared within hours, including socks, an $850 banana and New Zealand's national parks. A hacker collective also physically …

retail law enforcement
unit42.paloaltonetworks.com · medium

Unit 42 releases OperTraitor, finds over-privileged Kubernetes operators incl. IBM Prometurbo (CVE-2026-6389) and Datadog Operator

Unit 42 (Palo Alto Networks) released OperTraitor, an open-source, LLM-powered tool that ingests RBAC configurations from installed Kubernetes operators and the OperatorHub catalog. It compares an operator's documented function with its granted privileges and assigns a 1-10 risk score. The research found abandoned, overly permissive opera…

CVE-2026-6389