Category: Blue Team

The Art of Hunting Azure Cloud Secrets. The difference between a standard cloud test and a subscription takeover? Finding the right secrets. In this blog, we introduce two open-source tools…

‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad. An AI agent executes instructions that an attacker has planted in the log or alert that records a blocked request…

TLS Encryption and Compliance. Transport Layer Security: the compliance checkbox that’s harder to get right than it looks. In this blog, we cover the most common TLS misconfigurations and what…

The Art of Hunting Azure Cloud Secrets. The difference between a standard cloud test and a subscription takeover? Finding the right secrets. In this blog, we introduce two open-source tools…

‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad. An AI agent executes instructions that an attacker has planted in the log or alert that records a blocked request…

TLS Encryption and Compliance. TLS Encryption and Compliance has been making rounds in the red_team community lately. According to reports from trustedsec.com, Transport Layer Security: the compliance checkbox that’s harder…

The Art of Hunting Azure Cloud Secrets. The Art of Hunting Azure Cloud Secrets has been making rounds in the red_team community lately. According to reports from trustedsec.com, The difference…

Summary A comprehensive study examining over 6,000 AI-generated software patches has found that even when AI-generated patches “work” \u2014 meaning they resolve the targeted vulnerability \u2014 they introduce new bugs,…

Summary A critical zero-day vulnerability in Metabase, the popular open-source data analytics platform, is being actively exploited in the wild to gain administrative access without authentication. The vulnerability, assigned a…

Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs This story has been flagged as significant cybersecurity news. For full details, see the original source…