‚GitLost‘ Flaw Leaks Private Data From GitHub’s Agentic Workflows
The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too....
Aktuelle News & Analysen
Security News
Bleiben Sie informiert über die neuesten Cyber-Bedrohungen, Sicherheitslücken, Ransomware-Kampagnen und wichtige Entwicklungen aus der Security-Welt.
NEWS
Thinking Fast and Slow in the SOC: The Case for Combining Autonomous…
A few days ago, I was sitting with the CISO of a Fortune 50 company, walking through how his security…
NEWS
AI Can Find Bugs, But Human Knowledge Still Proves Them
Artificial intelligence (AI) is changing offensive security, but it has not changed the standard that matters most: a finding has…
IAM / ZERO TRUST
New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their…
ClickLock Stealer, a new macOS infostealer, answers a victim's refusal by killing their apps on a loop until they hand…
IAM / ZERO TRUST
n8n Token Exchange Flaw Could Let Attackers Log In as Users From…
n8n, the workflow automation platform, handed out the wrong accounts at login. On Enterprise instances configured to trust more than…
ENDPUNKTSICHERHEIT
New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands
Cybersecurity researchers have called attention to a new modular malware called TELEPUZ that's been spreading via websites infected with ClickFix…