‚GitLost‘ Flaw Leaks Private Data From GitHub’s Agentic Workflows
The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too....
Aktuelle News & Analysen
Security News
Bleiben Sie informiert über die neuesten Cyber-Bedrohungen, Sicherheitslücken, Ransomware-Kampagnen und wichtige Entwicklungen aus der Security-Welt.
NETZWERKSICHERHEIT
EU sanctions Russian GRU military hackers over cyberattacks
The European Union and the United Kingdom jointly sanctioned dozens of Russian individuals and entities and accused Russia of coordinating…
IAM / ZERO TRUST
Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365
An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a public port with…
IAM / ZERO TRUST
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion,…
NEWS
New MemGhost Attack Plants Persistent False Memories in AI Agents Through One…
Give an AI assistant a memory and access to your inbox, and you hand an attacker a way to rewrite…
NEWS
Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector…
Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across Chrome and Edge, after…