4 casos · pág. 1/1
Microsoft has warned that AI agents with access to enterprise systems can be manipulated through prompt injection, compromised inputs or shifts in task context. Agents do not need malicious intent to cause harm: their ability to read corporate data, invoke tools, approve transactions and talk to other agents widens exposure once untrusted…
Docking stations are easy to leave unpatched. A Dell support article (last modified May 22, 2026) says that with "Enable External USB Port" off and Type-C dock LAN on, the HD22Q, WD19 and WD22TB4 docks cannot be updated by Dell's Firmware Utility. Separately, the tools that update docks have had local vulnerabilities, including CVE-2023-4…
A Flare analysis argues that Scattered Spider, LAPSUS$ and ShinyHunters are distinct intrusion clusters within The Com, a decentralized, mostly English-speaking cybercriminal subculture, and not interchangeable names for one group. It describes SP1D3R HUNTERS (also called Scattered LAPSUS$ Hunters, SLH) as a shared brand and coordination …
Cisco Talos observed roughly 1,400 messages across two callback phishing campaigns that abuse legitimate Dell and Staples order notification pipelines. The attackers inject fraudulent helpline numbers into fields the retailer platforms render in authenticated transactional emails, so the messages pass authentication without spoofed sender…
