/
initial_access_vector:phishing × latest_source_host:itsecurityguru.org × limpar

Resultados

2 casos · pág. 1/1

itsecurityguru.org · medium

Salt Security survey: 49.8% of organisations report unintended or unauthorised AI agent actions; shadow MCP servers rising

A Salt Security report, State of Agentic AI and API Security 2H 2026, finds that 49.8% of surveyed organisations confirmed or suspected an AI agent took an unintended, unexpected or unauthorised action in the past year. The research combines a survey of 380+ security and technology professionals with Salt Labs production telemetry. Among …

itsecurityguru.org · high

SEO-poisoning campaign uses fake WatchGuard VPN download site to steal SSL VPN credentials, then serves the genuine signed client

Huntress researchers detailed an SEO-poisoning campaign on 13 October that harvests SSL VPN credentials through a lookalike WatchGuard download page, watchguard-vpn.net, and then delivers the legitimate, validly signed Mobile VPN with SSL installer. Earlier waves used trojanised installers, but this iteration contains no malware, so endpo…