Malvertising Campaign Uses Browser to Assemble Malware
SourTrade malvertising delivers malware in fragments, forcing the browser to reconstruct the payload. It leverages legitimate tools like Bun runtime to evade detection.
Read moreBlog
Security insights, vulnerability roundups, and updates from the Agent Breach team.
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.
Enforcing Least Privilege for AI Agents in Enterprise Security
AI agent adoption is outpacing security controls, creating new risks. Organizations need intent-aware policies beyond basic visibility.
Read moreBing Image Search Flaw Allowed Remote Code Execution as SYSTEM
A critical vulnerability in Bing Images enabled attackers to execute arbitrary commands with highest privileges on Microsoft's backend servers. The issue stemmed from unsafe processing of user-submitted SVG files.
Read moreCritical ChatGPT Agent Vulnerability Exposed
A severe flaw in OpenAI's ChatGPT Workspace Agents could have enabled attackers to deploy rogue AI agents through phishing links. The vulnerability, named AgentForger, has been patched as of June 8.
Read moreCertighost Flaw Lets Attackers Impersonate Domain Controllers
A new exploit allows low-privilege users to obtain DC certificates and escalate privileges. This vulnerability poses a serious risk to Active Directory environments.
Read moreBlueNoroff Deploys Zoom Phishing Kit Targeting Crypto Wallets
North Korean hackers are using fake Zoom login pages to profile victims' crypto wallets before delivering malware. This advanced phishing campaign combines domain spoofing with targeted social engineering.
Read morePAM Timing Vulnerability Exposes Authentication Data Risk
A timing discrepancy in PAM's pam_userdb module could allow attackers to extract sensitive information. Organizations should update their Ubuntu systems immediately to prevent exploitation.
Read moreThis Week in Threats: Android Spyware, AI Prompt Injection, and Hidden Dangers
Cyber threats are increasingly hiding in everyday tools and systems. Stay informed on the latest dangers targeting enterprise environments.
Read morelibinput Vulnerability Exposes Linux Systems to Privilege Escalation
A critical flaw in libinput allows local attackers to inject udev properties and execute code as root. Organizations using Ubuntu-based systems should apply patches immediately.
Read moreRussian Hackers Exploit Zimbra Zero-Day to Steal Emails and 2FA Codes
A Russian state-sponsored group used a previously unknown Zimbra vulnerability to access sensitive emails and bypass two-factor authentication. The attack highlights critical risks in enterprise webmail systems.
Read more