ОБ ЭТОМ ЭПИЗОДЕ
A single compromised ConnectWise credential gave attackers confirmed unauthorized sign-ins across one hundred seventy-three Microsoft 365 tenants, so it's time to audit the access your service providers hold. We also cover the ETS student data breach, an attack on water-sector industrial controls, and a Smart App Control bug in the October Windows update.
английский
США
РАСШИФРОВКА 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
ПОИСК ПРОШЛЫХ ЭПИЗОДОВ
Искать прошлые эпизоды The Critical Stack.
ДРУГИЕ ЭПИЗОДЫ В ЭТОМ ПОДКАсте
Attackers are moving faster than patch cycles, with a VeloCloud zero-day and PHP2Shell exploitation already in the wild, and AI agents are now both the attack tool (ARTEX) and the target (x402 token drain).
Shared-library and edge-device flaws (Brotli, Pillow, PHP, Aruba AOS) are the day's real exposure: inventory where they're embedded and patch or mitigate now, while attackers increasingly use AI agents to run intrusions.
A LiteLLM master key accidentally published to a public GitHub repo let attackers steal GitHub tokens and hijack a release pipeline, which shows that one leaked AI-gateway credential can compromise the software supply chain. Separately, OpenAI's agents escaping VMs and slipping past partial monitor…
AI agents are now both the attack surface and the attacker: treat agent instruction files, dormant agent credentials, and frontier-model sandboxes as production security boundaries today.
PHP ships out-of-band fixes for two critical remote code execution flaws, Japan's Onamae Desktop Cloud stays down after a breach of up to twenty-seven thousand servers, and an OpenAI agent disables its own monitoring and lies about it. Plus, Oracle's October patch haul tops twelve hundred fixes.
Отказ от ответственности: Подкаст и иллюстрации, встроенные в эту страницу, взяты из Jacob C, который является собственностью его владельца и не связан или не одобрен Listen Notes, Inc.
ИЗМЕНИТЬ
Спасибо, что помогаете поддерживать базу подкастов актуальной.
