Tag: control
-
Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks
Tags: apache, attack, control, cybersecurity, flaw, github, google, microsoft, open-source, supply-chainCybersecurity researchers have flagged a new class of CI/CD workflow weakness that allows attackers to hijack workflows and compromise open-source supply chains.The “critical exploitable pattern” has been codenamed Cordyceps by Novee Security. The issue can allow full attacker control of repositories at dozens of the largest organizations worldwide, including Microsoft, Google, Apache, and First seen…
-
In a first, a court takedown goes after two cybercrime tools at once
Microsoft, with law enforcement and industry partners, disrupted more than 200 command and control servers for Amadey and StealC, often used in conjunction. First seen on cyberscoop.com Jump to article: cyberscoop.com/microsoft-amadey-stealc-takedown/
-
Multiple Vulnerabilities in QNAP NAS Devices Resolved Through Security Updates
A series of vulnerabilities in QNAP NAS products has prompted security warnings after researchers identified flaws that could allow attackers to execute arbitrary commands, bypass security controls, disclose sensitive information, or disrupt system operations. The issues affect several QNAP platforms, including QTS, QuTS hero, QuTS cloud, and QVP appliances. First seen on thecyberexpress.com Jump to…
-
Dragos launches AI assistant for industrial control system cybersecurity
First seen on scworld.com Jump to article: www.scworld.com/brief/dragos-launches-ai-assistant-for-industrial-control-system-cybersecurity
-
No more blind trust: Identity controls for AI agents
First seen on scworld.com Jump to article: www.scworld.com/resource/no-more-blind-trust-identity-controls-for-ai-agents
-
Cordyceps Supply chain Vulnerability Impacting Code Repositories at thousands of Organizations
A pervasive CI/CD vulnerability pattern dubbed “Cordyceps” reveals a supply chain vulnerability that lets unauthenticated attackers seize control of Git-based workflows and, by extension, the software artifacts they produce. The issue is not a single bug in GitHub or any one tool; it is a systemic class of insecure workflow compositions. Command injection, broken authentication…
-
AWS Urges Organizations to Turn Outbound Blind Spots Into Monitored Checkpoints
When securing an Amazon Web Services (AWS) estate, teams naturally concentrate on inbound protections firewalls, WAFs, and IAM policies because those defenses stop the most visible attacks. Yet outbound traffic often remains under-monitored, left permissive to avoid breaking dependencies or to simplify operations. That default laxity creates a blind spot: without egress visibility and controls,…
-
OpenAI wants AI to fix vulnerabilities, not just find them
OpenAI expanded Daybreak, its cybersecurity initiative that combines AI models, Codex Security, security researchers, maintainers, industry partners, and access controls to … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/23/openai-expanded-daybreak-cybersecurity-initiative/
-
WhatsApp Malware Campaign Hijacks Trust, Installs Legitimate Admin Tools
WhatsApp accounts were hijacked to spread fake debt notices that install remote access software, giving attackers control of victims’ PCs. Kaspersky published a technical analysis this week of an active malware campaign that spreads through WhatsApp messages and ends with a remote management tool silently installed on the victim’s machine. The campaign is still running…
-
WhatsApp Malware Campaign Hijacks Trust, Installs Legitimate Admin Tools
WhatsApp accounts were hijacked to spread fake debt notices that install remote access software, giving attackers control of victims’ PCs. Kaspersky published a technical analysis this week of an active malware campaign that spreads through WhatsApp messages and ends with a remote management tool silently installed on the victim’s machine. The campaign is still running…
-
Cloudflare PACT: Neuer Privacy-Standard gegen Bots, Captchas und KI-Traffic im Internet
PACT steht für Private Access Control Tokens. Dabei handelt es sich um ein geplantes, datenschutzorientiertes Protokoll, mit dem Browser gegenüber Websites Vertrauenssignale übermitteln können First seen on infopoint-security.de Jump to article: www.infopoint-security.de/cloudflare-pact-neuer-privacy-standard-gegen-bots-captchas-und-ki-traffic-im-internet/a45560/
-
Pakt für PACT Cloudflare und Browser-Hersteller entwickeln Datenschutz-Protokoll für das Internet
Datenschutz soll künftig direkt in die Infrastruktur des Internets eingebaut werden. Cloudflare hat gemeinsam mit führenden Browser-Herstellern wie Mozilla, Google, Microsoft und Shopify die Entwicklung eines neuen, datenschutzorientierten Internet-Protokolls angekündigt. Private-Access-Control-Tokens (PACT). Das Verfahren soll Websites helfen, legitime Nutzer und autorisierte KI-Agenten von schädlichem automatisiertem Traffic zu unterscheiden ganz ohne aufdringliche Captchas, Zwangs-Logins oder […]…
-
Sapphire Sleet Hijacks npm Maintainer Account to Publish Poisoned Mastra Packages
A widespread npm supply”‘chain compromise to Sapphire Sleet, a North Korean state actor, after the takeover of an npm maintainer account enabled the mass publication of poisoned Mastra packages that silently delivered a multi”‘stage implant. The campaign, disclosed June 19, 2026, began when the attacker gained control of the ehindero maintainer identity an account with…
-
OXLOADER Uses MBA Obfuscation and Control-Flow Flattening to Bypass Static Detection
A previously undocumented Windows loader, tracked as OXLOADER, that combines sophisticated obfuscation and unconventional staging to evade static detection and sandbox analysis while delivering the new CASTLESTEALER infostealer via malvertising. The campaign leveraged malicious Google Ads impersonating Node.js and API Monitor, redirecting victims through intermediary domains to Storj-hosted batch scripts that download and execute OXLOADER…
-
From PGP to Mythos: a brief history of export controls that didn’t stop anyone
For the last 30 years, stopping the flow of cybersecurity-related software has proven to be ineffective. It’s unclear why it would work now with Anthropic’s cybersecurity model Mythos. First seen on techcrunch.com Jump to article: techcrunch.com/2026/06/19/encryption-spyware-and-now-mythos-history-shows-why-cyber-export-control-doesnt-work/
-
Encryption, spyware, and now Mythos: History shows why cyber export control doesn’t work
For the last 30 years, stopping the flow of cybersecurity-related software has proven to be ineffective. It’s unclear why it would work now with Anthropic’s cybersecurity model Mythos. First seen on techcrunch.com Jump to article: techcrunch.com/2026/06/19/encryption-spyware-and-now-mythos-history-shows-why-cyber-export-control-doesnt-work/
-
Forget Data Leakage: Shadow AI’s Real Threat Is Access Control
The first wave of enterprise AI concern was straightforward. It was simply employees pasting sensitive data into public AI tools. Security teams responded with usage policies, domain blocks, and data loss prevention rules. That response made sense at the time.It doesn’t fit the problem anymore.Shadow AI has shifted from a data leakage concern to an…
-
Mastodon 4.6 adds profile Collections and two-factor controls
People who run accounts on the open source social network Mastodon can now group profiles together and share those groups across the web. The 4.6 release centers on a feature … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/19/mastodon-4-6-released/
-
Alibaba Cloud Bets on France as Europe Seeks More Control Over AI
Alibaba Cloud opened two Paris availability zones as European enterprises weigh data sovereignty, resilience, and AI infrastructure needs. The post Alibaba Cloud Bets on France as Europe Seeks More Control Over AI appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-alibaba-cloud-ai-sovereignty-emea-france/
-
HazyBeacon Abuses AWS Lambda Function URLs for Stealthy CommandControl Operations
HazyBeacon is a stealthy cloud-native malware campaign identified as CL-STA-1020. It is exploiting Amazon Web Services (AWS) Lambda Function URLs to create covert command-and-control (C2) channels, marking a significant evolution in attacker tactics. According to recent Qualys research, the campaign primarily targets government entities across Southeast Asia by exploiting misconfigured serverless infrastructure. This allows adversaries…
-
Netskope gives MSPs more control over managed SASE delivery with under 15-minute SASE setup
First seen on scworld.com Jump to article: www.scworld.com/news/netskope-gives-msps-more-control-over-managed-sase-delivery-with-under-15-minute-sase-setup
-
AI Inherits People’s Permissions but Not Judgment
Your Controls Assume a Human Is Acting on the Data Being Accessed. But AI Isn’t Human AI is exposing a blind spot in enterprise security: Controls built for humans don’t work on agents that never pause, filter or apply judgment. New CISO research shows many organizations can’t track what AI is accessing – turning existing…
-
JPMorgan Pulls Anthropic Claude Access in Hong Kong
Restrictions Highlight Growing U.S.-China AI Security Tensions. JPMorgan Chase removed Anthropic’s Claude models from its approved AI platform for employees in Hong Kong, following restrictions tied to Greater China access rules and underscoring how U.S. export controls and geopolitical concerns are reshaping enterprise AI adoption in global financial markets. First seen on govinfosecurity.com Jump to…
-
US suspension of Anthropic models prompts AI sovereignty calls
The US government’s control order to suspend access to Anthropic’s Claude Fable 5 and Mythos 5 models raises concerns about the UK’s over-reliance on American tech First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366644826/US-suspension-of-Anthropic-models-prompts-AI-sovereignty-calls
-
DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic
Threat actors associated with the DragonForce ransomware have been observed using a custom Go-based remote access trojan (RAT) called Backdoor.Turn to conceal command-and-control (C2) traffic inside Microsoft Teams relay infrastructure.According to findings from Broadcom-owned Symantec and Carbon Black, the backdoor was deployed against a major U.S. services firm. The name of the company was First…
-
Google Adds New Android Controls for WhatsApp Backups, Password Transfers
Google’s June 2026 Android system updates add WhatsApp backup controls, Play Protect checks, passkey portability, and Play Store AI search. The post Google Adds New Android Controls for WhatsApp Backups, Password Transfers appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-google-android-june-2026-system-updates/
-
Hackers Could Abuse SQL Server 2025 AI Features to Steal Sensitive Data
A new security analysis has revealed that Microsoft SQL Server 2025’s native AI capabilities can be repurposed by attackers to stealthily exfiltrate sensitive data and establish command-and-control (C2) channels directly within the database engine, significantly expanding the post-exploitation attack surface. Security researcher Justin Kalnasy of SpecterOps demonstrated that newly introduced AI-focused features, intended to support…
-
A Detailed Guide on Villain C2 Framework
Overview Villain is an open-source command-and-control (C2) framework developed by t3l3machus that turns a single operator console into a full collaborative attack platform. It generates First seen on hackingarticles.in Jump to article: www.hackingarticles.in/a-detailed-guide-on-villain-c2-framework/
-
DragonForce Hid Inside Microsoft Teams and Nobody Noticed for Two Months
DragonForce hid for months by routing malware traffic through Microsoft Teams infrastructure, masking C2 activity and evading network detection. DragonForce ransomware operators hit a major U.S. services firm and stayed hidden for one to two months by routing their command-and-control traffic through Microsoft’s own Teams relay servers. Symantec’s threat hunters tracked the custom backdoor they…