/
ttps_attack:T1199 × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

hacktron.ai · medium

AI-accelerated 0-day research widens attack surface: Vercel breach via Context.ai OAuth, GitHub IDE extension compromise, Warp Terminal RCE

A Hacktron researcher argues that AI-assisted vulnerability research is rapidly widening the enterprise attack surface. He cites recent breaches at Vercel and GitHub and a wave of critical CVEs in F5, Fortinet, Cisco, Palo Alto and ImageMagick. According to the author, the Vercel compromise began with a breach of the AI platform Context.a…

theregister.com · critical

ConnectWise suspends Cloud Backup, SaaS Security and Cloud Management after compromise of app identities; Huntress sees M365 tenant takeover

ConnectWise disclosed on October 16 that on October 15 it detected unauthorized access to application identities in its Cloud Backup (formerly SkyKick) environment. It suspended Cloud Backup, plus the integrated SaaS Security and Cloud Management services, as a precaution. As of 16:00 UTC on October 18 the services were still down, so end…