‘Confused Deputy’ Flaws Persist in Google Cloud, Microsoft Azure
This category of vulnerabilities allows an attacker to easily acquire administrative level permissions and bypass cloud providers’ access controls. This category of vulnerabilities allows an attacker to easily acquire administrative level permissions and bypass cloud providers’ access controls. Read More
FBI: Breaking Affiliate Trust Sped Along LockBit’s Takedown
An FBI agent explains how the mulitnational law-enforcement Operation Cronos was successful in disrupting the largest ransomware group of its time. An FBI agent explains how the mulitnational law-enforcement Operation Cronos was successful in disrupting the largest ransomware group of its time. Read More
Why Resetting Passwords No Longer Stops Attackers
As attackers shift from password theft to session and token theft to bypass multifactor authentication controls, organizations must move beyond login security and protect authenticated sessions. As attackers shift from password theft to session and token theft to bypass multifactor authentication controls, organizations must move beyond login security and protect authenticated sessions. Read More
Adversaries Don’t Need a Zero-Day — They Read Your Rulebook
Confidence in autonomous security tools is declining, and here’s why. Confidence in autonomous security tools is declining, and here’s why. Read More