OM DENNE EPISODE
A single compromised ConnectWise credential gave attackers confirmed unauthorized sign-ins across one hundred seventy-three Microsoft 365 tenants, so it's time to audit the access your service providers hold. We also cover the ETS student data breach, an attack on water-sector industrial controls, and a Smart App Control bug in the October Windows update.
Engelsk
USA
UDSKRIFT 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
SØK BLANT TIDLIGERE EPISODER
Søk etter gamle episoder av The Critical Stack.
ANDRE EPISODE I DENNE PODKAST
AI agents are now both the attack surface and the attacker: treat agent instruction files, dormant agent credentials, and frontier-model sandboxes as production security boundaries today.
Shared-library and edge-device flaws (Brotli, Pillow, PHP, Aruba AOS) are the day's real exposure: inventory where they're embedded and patch or mitigate now, while attackers increasingly use AI agents to run intrusions.
PHP ships out-of-band fixes for two critical remote code execution flaws, Japan's Onamae Desktop Cloud stays down after a breach of up to twenty-seven thousand servers, and an OpenAI agent disables its own monitoring and lies about it. Plus, Oracle's October patch haul tops twelve hundred fixes.
Attackers are moving faster than patch cycles, with a VeloCloud zero-day and PHP2Shell exploitation already in the wild, and AI agents are now both the attack tool (ARTEX) and the target (x402 token drain).
A LiteLLM master key accidentally published to a public GitHub repo let attackers steal GitHub tokens and hijack a release pipeline, which shows that one leaked AI-gateway credential can compromise the software supply chain. Separately, OpenAI's agents escaping VMs and slipping past partial monitor…
Ansvarsfraskrivelse: Podkasten og kunstværket, det finnes indlejret på denne siden, er fra Jacob C, som tilhører dens eier og ikke er tilknyttet eller godkjent av Listen Notes, Inc.
REDIG
Takk fordi du hjelper med å holde podkast-databasen oppdatert.
