Tag: radius

Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities

Aug 17, 2026 11:55 PM

Tags: access, ai, attack, backup, breach, cloud, control, credentials, cybercrime, data, defense, detection, encryption, endpoint, group, guide, infrastructure, intelligence, malicious, malware, microsoft, mitre, radius, ransom, ransomware, service, software, tactics, threat, tool, unauthorized

Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted from simple endpoint encryption…
Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities

Aug 17, 2026 11:55 PM

Tags: access, ai, attack, backup, breach, cloud, control, credentials, cybercrime, data, defense, detection, encryption, endpoint, group, guide, infrastructure, intelligence, malicious, malware, microsoft, mitre, radius, ransom, ransomware, service, software, tactics, threat, tool, unauthorized

Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted from simple endpoint encryption…
Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities

Aug 17, 2026 11:55 PM

Tags: access, ai, attack, backup, breach, cloud, control, credentials, cybercrime, data, defense, detection, encryption, endpoint, group, guide, infrastructure, intelligence, malicious, malware, microsoft, mitre, radius, ransom, ransomware, service, software, tactics, threat, tool, unauthorized

Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted from simple endpoint encryption…
Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities

Aug 17, 2026 11:55 PM

Tags: access, ai, attack, backup, breach, cloud, control, credentials, cybercrime, data, defense, detection, encryption, endpoint, group, guide, infrastructure, intelligence, malicious, malware, microsoft, mitre, radius, ransom, ransomware, service, software, tactics, threat, tool, unauthorized

Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted from simple endpoint encryption…
Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities

Aug 17, 2026 11:55 PM

Tags: access, ai, attack, backup, breach, cloud, control, credentials, cybercrime, data, defense, detection, encryption, endpoint, group, guide, infrastructure, intelligence, malicious, malware, microsoft, mitre, radius, ransom, ransomware, service, software, tactics, threat, tool, unauthorized

Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted from simple endpoint encryption…
Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities

Aug 17, 2026 11:55 PM

Tags: access, ai, attack, backup, breach, cloud, control, credentials, cybercrime, data, defense, detection, encryption, endpoint, group, guide, infrastructure, intelligence, malicious, malware, microsoft, mitre, radius, ransom, ransomware, service, software, tactics, threat, tool, unauthorized

Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted from simple endpoint encryption…
Logistics Giant Ceva Suffers Data Breach Impacting European Clients

Aug 11, 2026 1:26 PM

Tags: attack, breach, data, data-breach, radius, supply-chain

Supply chain attack and data breach at Ceva Logistics appears to have a large blast radius First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/logistics-ceva-data-breach/
Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius

Aug 11, 2026 12:26 AM

Tags: access, attack, business, cve, malicious, radius, sql, vulnerability, zero-day

The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/metabase-sql-zero-day-attacks-wide-blast-radius
Week in review: Cisco fixes IMC bug, Patch Tuesday forecast, Black Hat USA 2026

Aug 9, 2026 10:27 AM

Tags: cisco, malware, radius, update, usa, WeeklyReview

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Mapping the malware blast radius a single alert won’t show you In this … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/09/week-in-review-cisco-fixes-imc-bug-patch-tuesday-forecast-black-hat-usa-2026/
How AI Agents Widen the Enterprise Blast Radius

Aug 8, 2026 12:26 AM

Tags: ai, api, cloud, data, governance, least-privilege, radius, risk, service

AWS’s Matt Girdharry and Varonis’ Matt Radolec on Data Security, Machine-Speed Risk. Agentic AI can act at machine speed across data, APIs and cloud services, expanding enterprise risk beyond traditional controls. AWS’ Matt Girdharry and Varonis’ Matt Radolec explain why AI governance, least privilege and runtime visibility now matter more than ever for security teams.…
ThreatLabz 2026 Report: Frontier AI and Enterprise Readiness

Aug 7, 2026 7:29 PM

Tags: access, ai, attack, authentication, breach, cisa, ciso, control, credentials, cyberattack, data, data-breach, endpoint, exploit, flaw, governance, identity, Internet, kev, login, malicious, privacy, radius, resilience, strategy, switch, threat, update, vpn, vulnerability, zero-trust

The BreachIt was 9:14 AM when the CISO’s VPN connection momentarily dropped, something that normally wouldn’t cause any concern. What he couldn’t see was that attackers had already exploited a pre-authentication flaw in the VPN appliance itself, gaining access before any login ever occurred. From there, they extracted stored credentials, forged an identity as his…
ThreatLabz 2026 Report: Frontier AI and Enterprise Readiness

Aug 7, 2026 7:29 PM

Tags: access, ai, attack, authentication, breach, cisa, ciso, control, credentials, cyberattack, data, data-breach, endpoint, exploit, flaw, governance, identity, Internet, kev, login, malicious, privacy, radius, resilience, strategy, switch, threat, update, vpn, vulnerability, zero-trust

The BreachIt was 9:14 AM when the CISO’s VPN connection momentarily dropped, something that normally wouldn’t cause any concern. What he couldn’t see was that attackers had already exploited a pre-authentication flaw in the VPN appliance itself, gaining access before any login ever occurred. From there, they extracted stored credentials, forged an identity as his…
Guide to Agentic AI Governance

Aug 6, 2026 4:27 PM

Tags: access, ai, api, application-security, attack, authentication, business, cloud, compliance, control, credentials, data, email, exploit, finance, framework, GDPR, governance, guide, healthcare, identity, injection, least-privilege, LLM, malicious, monitoring, phishing, radius, regulation, risk, service, software, tool, unauthorized, vulnerability

Agentic AI governance is about keeping powerful, autonomous AI systems aligned, safe, and accountable as they act on our behalf. It’s now a certainty that AI agents will be deployed enterprise-wide. So, we need to look more deeply into those agents, figure out where they are, how to find them, and fully understand what they…
Guide to Agentic AI Governance

Aug 6, 2026 4:27 PM

Tags: access, ai, api, application-security, attack, authentication, business, cloud, compliance, control, credentials, data, email, exploit, finance, framework, GDPR, governance, guide, healthcare, identity, injection, least-privilege, LLM, malicious, monitoring, phishing, radius, regulation, risk, service, software, tool, unauthorized, vulnerability

Agentic AI governance is about keeping powerful, autonomous AI systems aligned, safe, and accountable as they act on our behalf. It’s now a certainty that AI agents will be deployed enterprise-wide. So, we need to look more deeply into those agents, figure out where they are, how to find them, and fully understand what they…
Stairwell Launches Backstory to Map Malware Blast Radius Beyond the First Alert

Aug 5, 2026 10:27 PM

Tags: malware, radius, usa

Stairwell has launched Backstory, an agentic investigation platform designed to trace related malware variants, identify affected systems and map an incident’s full blast radius. The platform was announced July 29 as Stairwell prepared to showcase it at Black Hat USA 2026. Backstory is built to answer what happened, where an incident spread and what needs..…
Mapping the malware blast radius a single alert won’t show you

Aug 3, 2026 8:26 AM

Tags: ai, malware, radius

In this interview with Help Net Security, Mike Wiacek, founder and CTO of Stairwell, explains Backstory, an AI agent that takes a single alert and works outward to map how far … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/03/mike-wiacek-stairwell-backstory-malware-blast-radius/
How to Design Segmentation That Actually Reduces Blast Radius

Jul 28, 2026 6:12 AM

Tags: radius

First seen on scworld.com Jump to article: www.scworld.com/tech-explainer/how-to-design-segmentation-that-actually-reduces-blast-radius
AI security is repeating endpoint security’s biggest mistake

May 11, 2026 5:20 PM

Tags: access, ai, api, automation, business, control, data, detection, edr, endpoint, governance, incident response, injection, LLM, monitoring, open-source, radius, risk, saas, sbom, soc, strategy, technology, threat, tool, update

Most AI security is still at the posture phase: Look at where most organizations are with AI security today. Model cards, AI-specific SBOMs, input and output filters, prompt injection guardrails and access controls around model APIs. These are valuable controls, but they reflect a posture-based approach. To truly enhance security, organizations must recognize the importance…
NY Fines Delta Dental $2.25M Over 2023 MOVEit Hack

May 4, 2026 10:49 PM

Tags: cyber, exploit, moveIT, radius, software, vulnerability, zero-day

Investigators Find Violations of State Cyber Regulations. New York fined Delta Dental $2.25 million for the company’s response to the mass exploit of a zero-day vulnerability in Progress Software’ MOVEit file transfer application. Delta Dental is one of thousands of organizations caught up in the blast radius of an automated 2023 Memorial Day hack. First…
Mastering agentic AI security through exposure management

Apr 29, 2026 4:39 PM

Tags: access, ai, attack, breach, cloud, control, cyber, cybersecurity, data, detection, email, endpoint, exploit, finance, governance, identity, injection, Internet, malicious, microsoft, monitoring, radius, risk, strategy, tool, vulnerability

As AI tools evolve from siloed chatbots to autonomous, hyperconnected systems, they create a vast new attack surface. Discover how to manage this risk by focusing on visibility, agency, and semantic security to protect your organization’s increasingly complex landscape of agentic AI systems. Key takeaways Organizations have moved from siloed AI chatbots to autonomous, hyperconnected…
Mastering agentic AI security through exposure management

Apr 29, 2026 4:39 PM

Tags: access, ai, attack, breach, cloud, control, cyber, cybersecurity, data, detection, email, endpoint, exploit, finance, governance, identity, injection, Internet, malicious, microsoft, monitoring, radius, risk, strategy, tool, vulnerability

As AI tools evolve from siloed chatbots to autonomous, hyperconnected systems, they create a vast new attack surface. Discover how to manage this risk by focusing on visibility, agency, and semantic security to protect your organization’s increasingly complex landscape of agentic AI systems. Key takeaways Organizations have moved from siloed AI chatbots to autonomous, hyperconnected…
3 practical ways AI threat detection improves enterprise cyber resilience

Apr 23, 2026 11:38 PM

Tags: access, ai, attack, automation, backup, cloud, cyber, data, detection, dns, endpoint, exploit, framework, identity, login, malicious, network, radius, ransomware, resilience, risk, service, threat, tool, update, vpn, vulnerability, vulnerability-management

Legitimate admin activity and malicious behavior often look similar without contextHybrid environments generate fragmented telemetry that rule sets can’t correlateLean teams don’t have time to manually connect the dots across systemsPlatforms like Adlumin MDR apply behavioral models and automated triage to suppress low”‘value alerts and elevate incidents that actually matter. Fewer alerts, better context, and…
3 practical ways AI threat detection improves enterprise cyber resilience

Apr 23, 2026 11:38 PM

Tags: access, ai, attack, automation, backup, cloud, cyber, data, detection, dns, endpoint, exploit, framework, identity, login, malicious, network, radius, ransomware, resilience, risk, service, threat, tool, update, vpn, vulnerability, vulnerability-management

Legitimate admin activity and malicious behavior often look similar without contextHybrid environments generate fragmented telemetry that rule sets can’t correlateLean teams don’t have time to manually connect the dots across systemsPlatforms like Adlumin MDR apply behavioral models and automated triage to suppress low”‘value alerts and elevate incidents that actually matter. Fewer alerts, better context, and…
Malicious pgserve, automagik developer tools found in npm registry

Apr 23, 2026 5:39 AM

Tags: access, attack, breach, cloud, control, corporate, credentials, crypto, data, firewall, github, infrastructure, least-privilege, malicious, malware, network, open-source, password, radius, risk, service, software, tactics, theft, threat, tool, worm

Advice to victimized developers: Developers who have downloaded the malicious versions of pgserver and automagik need to act fast, says Tanya Janca, head of Canadian secure coding consultancy SheHacksPurple.”Rotate every credential you can think of, right now, before you do anything else,” she said. “Then harden your CI/CD network egress controls so your build runners…
Why the Axios attack proves AI is mandatory for supply chain security

Apr 20, 2026 4:37 PM

Tags: ai, attack, government, malicious, north-korea, radius, startup, supply-chain, threat

Two weeks ago, a suspected North Korean threat actor slipped malicious code into a package within Axios, a widely used JavaScript library. The immediate concern was the blast radius: roughly 100 million weekly downloads spanning enterprises, startups, and government systems. But beyond the sheer scale, the attack’s speed was just as worrisome a stark […]…
Virginia enacts ban on precise geolocation data sales as momentum for similar prohibitions builds

Apr 14, 2026 7:52 PM

Tags: data, radius

The legislation bars the sale of geolocation within a 1,750 foot radius, a buffer large enough to keep data brokers from pinpointing where consumers live, work, worship, shop and otherwise travel. First seen on therecord.media Jump to article: therecord.media/virginia-enacts-ban-on-precise-geolocation-data
7 Privilege Management Mistakes That Put Business Data at Risk

Apr 13, 2026 6:52 AM

Tags: access, api, attack, authentication, breach, business, control, credentials, cyber, cybersecurity, dark-web, data, data-breach, detection, email, exploit, extortion, finance, github, governance, government, hacker, ibm, identity, infrastructure, insurance, ISO-27001, jobs, least-privilege, login, mfa, microsoft, monitoring, network, okta, password, privacy, radius, ransomware, regulation, risk, russia, scam, service, software, supply-chain, theft, threat, tool, unauthorized, usa, vpn, vulnerability, zero-trust

Every growing business has at least one lingering privilege management issue. It’s not because your team is lazy. It’s because organizations grow, restructure and hire far faster than manual access processes can keep up. When roles evolve or contractors come and go, permissions accumulate behind the scenes”, creating invisible attack paths. In this post, we…
7 Privilege Management Mistakes That Put Business Data at Risk

Apr 13, 2026 6:52 AM

Tags: access, api, attack, authentication, breach, business, control, credentials, cyber, cybersecurity, dark-web, data, data-breach, detection, email, exploit, extortion, finance, github, governance, government, hacker, ibm, identity, infrastructure, insurance, ISO-27001, jobs, least-privilege, login, mfa, microsoft, monitoring, network, okta, password, privacy, radius, ransomware, regulation, risk, russia, scam, service, software, supply-chain, theft, threat, tool, unauthorized, usa, vpn, vulnerability, zero-trust

Every growing business has at least one lingering privilege management issue. It’s not because your team is lazy. It’s because organizations grow, restructure and hire far faster than manual access processes can keep up. When roles evolve or contractors come and go, permissions accumulate behind the scenes”, creating invisible attack paths. In this post, we…
Crushing the Axios supply chain threat with Tenable Hexa AI: Use cases for agentic AI

Apr 10, 2026 4:53 PM

Tags: ai, attack, business, credentials, crypto, cve, data, data-breach, malicious, moveIT, network, okta, radius, risk, software, supply-chain, threat, update, vulnerability, zero-day

See how you can use Tenable Hexa AI to determine in minutes if you’re impacted by the Axios npm supply chain attack. Learn how easy it is to automate configuration of scans, identify impacted assets, prioritize remediation, and more using agentic AI from Tenable. Key takeaways: Tenable Hexa AI, the agentic engine of the Tenable…
Crushing the Axios supply chain threat with Tenable Hexa AI: Use cases for agentic AI

Apr 10, 2026 4:53 PM

Tags: ai, attack, business, credentials, crypto, cve, data, data-breach, malicious, moveIT, network, okta, radius, risk, software, supply-chain, threat, update, vulnerability, zero-day

See how you can use Tenable Hexa AI to determine in minutes if you’re impacted by the Axios npm supply chain attack. Learn how easy it is to automate configuration of scans, identify impacted assets, prioritize remediation, and more using agentic AI from Tenable. Key takeaways: Tenable Hexa AI, the agentic engine of the Tenable…