‚GitLost‘ Flaw Leaks Private Data From GitHub’s Agentic Workflows
The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too....
Aktuelle News & Analysen
Security News
Bleiben Sie informiert über die neuesten Cyber-Bedrohungen, Sicherheitslücken, Ransomware-Kampagnen und wichtige Entwicklungen aus der Security-Welt.
IAM / ZERO TRUST
DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts
A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between…
CLOUD-SICHERHEIT
BeyondTrust warns of critical flaws in remote access software
BeyondTrust warned customers to patch two critical security flaws in its Remote Support (RS) and Privileged Remote Access (PRA) software…
CLOUD-SICHERHEIT
Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots
A critical flaw in Google's Dialogflow CX could have let an attacker with edit rights on one Code Block-enabled agent…
ENDPUNKTSICHERHEIT
Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider…
U.S. prosecutors linked an alleged Scattered Spider hacker to a break-in at a luxury jewelry retailer using a persistent Windows…
ENDPUNKTSICHERHEIT
RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service
A new Android malware operation called RedWing is being rented out on Telegram as a ready-made bank-fraud service. It lets…