3 casos · pág. 1/1
MITRE released version 20 of its ATT&CK framework, expanding coverage of recent adversary tradecraft across the Enterprise, ICS and Mobile domains. Enterprise gains nine techniques and sub-techniques, including two prompt injection techniques (direct and indirect), abuse of an organization's own AI agents for data theft, poisoning of web …
Bitdefender documented Midnight Mimosa, an Android malware campaign that embeds a platform-signed malicious system app in the firmware of low-cost, MediaTek-based handsets and counterfeit flagship models before they reach buyers. Thousands of infected devices were observed in more than 150 countries over roughly two years. The implant dri…
A Chainguard survey released at its Assemble London event on October 14 found that 66% of security leaders at companies with $1bn or more in revenue admit leaving high or critical vulnerabilities unpatched "at least sometimes". Among companies with under $250m in revenue, the figure was 27%. Larger firms cite business trade-offs: disrupti…
