Tag: framework
-
Metabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive Data
Attackers exploited a CVSS 10 Metabase zero-day to gain admin access and steal sensitive data. Framework confirmed it was among the victims. Metabase just confirmed something no analytics vendor wants to write: attackers found and used an unpatched, maximum-severity flaw against Metabase Cloud before anyone on the defense side knew it existed. The company’s own…
-
Detecting Cobalt Strike beacons with JA3 and JARM fingerprinting
Cobalt Strike remains a common post-compromise tool in intrusion sets because it gives an operator a flexible command-and-control channel, tasking framework, and a way to blend into normal network traffic. For defenders, the challenge is not just spotting malware on an endpoint. It is identifying the beaconing pattern that sits behind the traffic, especially when……
-
Metabase SQLi zero-day exploited in customer data-theft attacks
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/framework-tally-disclose-metabase-data-theft-attacks/
-
Mapping One Control Set to Multiple Frameworks – Kovrr
Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/mapping-one-control-set-to-multiple-frameworks-kovrr/
-
Computer maker Framework notifies ‘all customers’ of a data breach
Framework told “all” of its customers that hackers accessed their names, email addresses, phone numbers, and physical addresses in a data breach. First seen on techcrunch.com Jump to article: techcrunch.com/2026/08/07/computer-maker-framework-notifies-all-customers-of-a-data-breach/
-
Frontier AI Has a Cybersecurity Expertise Problem
First OpenAI’s model went rogue and broke out of testing containment to hack real systems, then Anthropic, and now Meta AI. Do you see a trend? Here is what it means: Although these frontier AI companies employ some of the world’s brightest engineers, architects, and developers, technical excellence is not the same as deep cybersecurity…
-
Day 2 at Black Hat: Check Point Research Takes the Stage
ay two at Black Hat, and Check Point Research brought two talks to the stage that gave the room plenty to think about. One dug into afifteen year oldblind spot sitting inside Windows itself. The other pulled apart the agent frameworks powering today’s AI products and found familiar bugs wearing new clothes. Here’swhat our researchers…
-
Why AI Governance Requires Continuous Compliance Assurance
Schellman CEO Avani Desai on Building Governance Before Technology Enforcement. Artificial intelligence governance must evolve as agentic AI systems make decisions at machine speed. Schellman CEO Avani Desai explains why organizations need continuous auditing, unified controls and multiple frameworks to prove AI trustworthiness without slowing innovation. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ai-governance-requires-continuous-compliance-assurance-a-32438
-
Vanta Stealer Uses PyArmor to Steal Browser Passwords, Crypto Wallets and Discord Tokens
Vanta Stealer is a Python”‘based, cross”‘platform information stealer that uses layered PyArmor obfuscation on top of a PyInstaller”‘packed executable to harvest browser passwords, crypto wallet data, Discord tokens, gaming accounts, VPN configs, and sensitive documents. Vanta Stealer exemplifies the current shift toward Python for modular, easily maintainable malware, while abusing commercial protection frameworks like PyArmor…
-
Secret White House AI Safety Framework Draws Criticism
Watchdogs Say Public Accountability Suffers When AI Oversight Stays Hidden. The White House declined to publicly release its voluntary AI safety framework, prompting criticism from technology watchdogs and lawmakers who say secret oversight undermines accountability. Critics argue transparency is essential as the government expands its review of frontier AI models. First seen on govinfosecurity.com Jump…
-
Metasploit Opens Its Exploit Engine to LLMs via New MCP Integration
If there was any reason to patch your systems, this would be it: The release of Metasploit 6.5, which brings the penetration testing framework into the AI age. Now, script kiddies and sophisticated foreign operatives don’t even have to cut and paste their code to break into your systems. They can just ask Metasploit to..…
-
What Gold Eagle Validates, and What Your Organization Still Has to Own (July 2026)
Tags: ai, business, compliance, data, finance, framework, government, intelligence, open-source, update, vulnerabilityWhat Gold Eagle Validates, and What Your Organization Still Has to Own (July 2026) The federal government just stood up a clearinghouse to find and validate vulnerabilities faster, with AI doing the finding. That is not the same thing as a clearinghouse that owns the consequence when a patch does not land in time. Key…
-
How to Build an AI Business Case When ROI Is Hard to Measure: A CFO’s Framework for Justifying AI Investments
Primary keyword: AI ROI model Artificial intelligence has created a new problem inside the boardroom. Everyone agrees AI has value. Very few organizations agree on…Read More First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2026/08/how-to-build-an-ai-business-case-when-roi-is-hard-to-measure-a-cfos-framework-for-justifying-ai-investments/
-
ConnectWise, SentinelOne Align on Shared Strategy for MSP Security at Black Hat
ConnectWise and SentinelOne (NYSE: S) used Black Hat 2026 to announce a shared strategy aimed at advancing managed cybersecurity for MSPs and the customers they protect. The move builds on the two companies’ existing collaboration through ConnectWise Managed EDR with SentinelOne. The new framework is designed to more closely connect the AI-driven security capabilities of..…
-
Open Secure AI Alliance Proposes AI Agent Security Rules
SAFE framework seeks incident sharing after AI agent security breaches. The Open Secure AI Alliance has proposed a cybersecurity information-sharing framework for AI agents following recent security incidents involving OpenAI and Anthropic models. The SAFE guidelines would require members to report AI security incidents, share threat intelligence and preserve evidence to help reduce systemic risks…
-
Open Secure AI Alliance Expands at Black Hat: What You Should Know
The Open Secure AI Alliance introduced SAFE guidelines and open agent-security tools at Black Hat, giving enterprises a framework for safer AI deployment. The post Open Secure AI Alliance Expands at Black Hat: What You Should Know appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-open-secure-ai-alliance-safe-guidelines-black-hat/
-
Many medical AI developers unfamiliar with regulations
Most developers feel responsible for the AI tools they build, but few know the frameworks meant to keep patients safe, according to a study by Singapore’s Nanyang Technological University First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366646993/Many-medical-AI-developers-unfamiliar-with-regulations
-
KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066)
A critical security vulnerability (CVE-2026-66066) in Ruby on Rails (aka Rails), one of the most widely used frameworks for building websites and web apps, may allow attackers … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/03/kindarails2shell-cve-2026-66066-vulnerability/
-
Metasploit Exploit Targets Critical Ruby on Rails Active Storage RCE Flaw
A new Metasploit Framework module has been submitted for review, targeting the critical Ruby on Rails Active Storage vulnerability, tracked as CVE-2026-66066. This submission poses an increased risk to applications that utilize the Vips image-processing backend. The proposed module is named `exploit/multi/http/rails_activestorage_vips_rce` and was introduced in Rapid7 Metasploit Framework pull request #21733 by contributor jburgess-r7.…
-
AI Security Incident Response Framework – Kovrr
Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/ai-security-incident-response-framework-kovrr/
-
CMMC 2.0 Audits: Lazarus Alliance Compliance Assessments
In 2026, defense contractors face heightened scrutiny under the CMMC 2.0 Final Rule, where compliance assessments have shifted from preparatory exercises to mandatory gatekeepers for contract eligibility. Lazarus Alliance brings first-hand audit experience to help organizations navigate this landscape with precision, integrating CMMC requirements with broader frameworks like NIST 800-171 and ISO 27001. CMMC 2.0″¦…
-
Chinesischer Hacker steuert DeepSeek über Telegram für autonome Angriffe
Ein chinesischsprachiger Angreifer ließ das KI-Modell DeepSeek über das Framework Hermes Agent weitgehend selbstständig Angriffe ausführen. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/hacker-deepseek-autonome-angriffe
-
Rails patches critical Active Storage flaw with RCE potential
A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution (RCE). First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/rails-patches-critical-active-storage-flaw-with-rce-potential/
-
CISA Issues Fresh SBOM Guidance. Did They Get It Right?
A couple-dozen changes to SBOM fields will make them more comprehensive, but some argue that the framework lacks real risk-management improvements. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/cisa-issues-fresh-sbom-guidance
-
HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm
Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka.According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted archive, which holds a Windows Shortcut (LNK). Executing the file triggers a multi-stage chain that First…
-
Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks
Palo Alto Networks’ Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously.After an initial Telegram instruction, the agent found internet-facing systems and selected public exploits. The researchers recovered no further operator input in the session.The operator, tracked through the aliases knaithe and KnYuan, First seen…
-
Chinese-Speaking Hacker Uses DeepSeek Agent to Launch Autonomous Cyberattacks
Chinese-speaking threat actor “knaithe” (aka KnYuan) has been caught running an AI-enabled autonomous attack stack built around DeepSeek and the Hermes Agent framework, proving that large language models can now drive end”‘to”‘end offensive operations with minimal human oversight. Hermes provided terminal access, skills orchestration, and Model Context Protocol (MCP) integrations. At the same time, DeepSeek…
-
OctLurk and SilkLurk Backdoors Target Central Asian Governments in Cyberespionage Campaign
OctLurk and SilkLurk are highly customized, memory”‘resident backdoors used in an ongoing cyberespionage campaign against government and critical”‘sector networks across Central Asia and Syria, operated by a Chinese”‘speaking threat actor but not yet linked to a known APT. Active since January 2025, the operation leverages victim”‘specific loaders, multi”‘plugin frameworks, and shared infrastructure, along with Linux”‘focused…