4 casos · pág. 1/1
MITRE released version 20 of its ATT&CK framework, expanding coverage of recent adversary tradecraft across the Enterprise, ICS and Mobile domains. Enterprise gains nine techniques and sub-techniques, including two prompt injection techniques (direct and indirect), abuse of an organization's own AI agents for data theft, poisoning of web …
Infoblox introduces Agentic Denial of Service (ADoS), a class of disruption in which AI agents overwhelm systems with excessive requests, actions or computations, or in which an adversary turns a defender's own automation against it. It is not "DDoS with AI": it denies the business effective use of its AI agents, the infrastructure they d…
Aikido published a vendor blog post arguing that SCA reachability analysis is not enough for prioritizing dependency vulnerabilities. Reachability shows whether code can execute a vulnerable function. Exploitability asks whether an attacker can satisfy the conditions the bug needs. The article uses lodash .template command injection (CVE-…
This Huntress vendor blog post is educational and promotional content, not a report of a specific threat or incident. It compares 13 cybersecurity and regulatory frameworks, including NIST CSF 2.0, NIST SP 800-53, ISO 27001, CIS Critical Security Controls, COBIT, HIPAA, PCI DSS 4.0, SOC 2, MITRE ATT&CK, CMMC 2.0, GLBA, FISMA and FFIEC CAT…
