Security insights, vulnerability roundups, and updates from the Agent Breach team.
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.
A new PoC dubbed ShieldBreak targets a patch bypass in Microsoft Defender, potentially granting attackers SYSTEM-level privileges. Security teams should monitor developments closely.
Read moreA newly patched vulnerability in SAP Commerce Cloud carries a perfect CVSS score of 10.0, allowing unauthenticated attackers to execute arbitrary code. Organizations using the Data Hub Adapter component should apply updates immediately.
Read moreMicrosoft identifies Storm-1175 using a new C++-based ransomware strain. The group has shifted from Medusa to StormEncryptor, targeting enterprise systems.
Read moreAI boosts dev output by 10-50x, but security must keep pace. Learn how to avoid bottlenecks while maintaining control over shipped code.
Read moreMultiple vulnerabilities in ImageMagick affect several Ubuntu LTS versions, potentially allowing attackers to execute arbitrary code via crafted images.
Read moreA supply chain attack on WordPress plugin vendor BdThemes bypassed code modifications by poisoning JSON files. The breach enabled attackers to create unauthorized admin accounts without altering source code.
Read moreCybercriminals accessed industrial control systems through a private cellular network, temporarily shutting down critical infrastructure. The breach highlights risks in remote access configurations for operational technology environments.
Read moreAn AI system uncovered novel HTTP request smuggling techniques by testing thousands of attack vectors. Researchers also found a critical zero-day vulnerability in Apache Traffic Server.
Read moreAttackers are exploiting Microsoft 365 accounts using Adversary-in-the-Middle techniques to access sensitive payroll and financial data. The campaign leverages residential proxies to mask malicious activity as legitimate user traffic.
Read moreA new attack vector called NatJack can hijack TCP sessions and spoof DNS by manipulating NAT tables. This affects major platforms including Windows and poses serious risks to enterprise networks.
Read more