O TYM ODCINKU
Attackers are turning trusted channels into attack paths: a genuine, signed Siemens Software Center delivers a RAT, and ConnectWise suspends Cloud Backup after a supply chain attack. Plus new ATT&CK coverage for AI abuse and MFA bypass, and out-of-band NGINX patches from F5.
Język angielski
Stany Zjednoczone
TRANSKRYPCJA 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
WYSZUKAJ MINIONE ODCINKI
Wyszukaj minione odcinki The Critical Stack.
INNE ODCINKI W TYM PODCASCIE
A single compromised ConnectWise credential gave attackers confirmed unauthorized sign-ins across one hundred seventy-three Microsoft 365 tenants, so it's time to audit the access your service providers hold. We also cover the ETS student data breach, an attack on water-sector industrial controls, …
Attackers are exploiting a SiteGuard web application firewall flaw to run commands as root or system, turning a security control into the way in. Plus, Dragos says fewer than ten percent of OT networks have adequate monitoring, and criminals are starting to notice.
Cisa orders federal agencies to patch exploited Plex2Shell, Siemens and SiteGuard flaws that can be chained for unauthenticated remote code execution. Plus, cloud platform Zeabur shuts down after a second breach in two months, and a joint advisory says SafePay ransomware has hit over six hundred cr…
Two critical unauthenticated remote code execution flaws force an emergency Next.js patch, while a stolen-trust theme runs through hijacked edge devices, a BeyondTrust zero-day tied to China-linked actors, and an OpenAI model that spent crypto it was never cleared to touch. Audit third-party and ag…
Zastrzeżenie: Podcast i grafika osadzone na tej stronie pochodzą z Jacob C, który jest własnością jego właściciela i nie jest powiązany ani wspierany przez Listen Notes, Inc.
EDYTUJ
Dziękujemy za pomoc w aktualizowaniu podcastowej bazy danych.
