[HIGH] – JetBrains Cadence Incident Prompts Credential Rotation
JetBrains tells Cadence users to rotate credentials after a TeamCity-linked security incident.
Innovator Spotlight: Morphisec
Innovator Spotlight: Morphisec. The AI You Didn’t Approve Is Already Running In Your Environment Ask a security leader which AI vendors their organization has vetted, and most can produce a…
4 Steps for Making Sure Domain Impersonation Takedown Requests Dont Get Rejected
4 Steps for Making Sure Domain Impersonation Takedown Requests Don’t Get Rejected. Brand impersonation is one of the fastest growing threats facing organizations today. Bad actors create fake websites using…
The Art of Hunting Azure Cloud Secrets
The Art of Hunting Azure Cloud Secrets. The difference between a standard cloud test and a subscription takeover? Finding the right secrets. In this blog, we introduce two open-source tools…
Ghostjacking Attack Uses Poisoned Logs to Turn AI Agents Bad
‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad. An AI agent executes instructions that an attacker has planted in the log or alert that records a blocked request…
The Art of Hunting Azure Cloud Secrets
The Art of Hunting Azure Cloud Secrets. The difference between a standard cloud test and a subscription takeover? Finding the right secrets. In this blog, we introduce two open-source tools…
Ghostjacking Attack Uses Poisoned Logs to Turn AI Agents Bad
‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad. An AI agent executes instructions that an attacker has planted in the log or alert that records a blocked request…
TLS Encryption and Compliance
TLS Encryption and Compliance. Transport Layer Security: the compliance checkbox that’s harder to get right than it looks. In this blog, we cover the most common TLS misconfigurations and what…
The Art of Hunting Azure Cloud Secrets
The Art of Hunting Azure Cloud Secrets. The difference between a standard cloud test and a subscription takeover? Finding the right secrets. In this blog, we introduce two open-source tools…
Ghostjacking Attack Uses Poisoned Logs to Turn AI Agents Bad
‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad. An AI agent executes instructions that an attacker has planted in the log or alert that records a blocked request…