Tag: code execution
The Race for AI-Powered Security Platforms Heats Up
When a major vulnerability shakes up the cybersecurity world — such as the recent XZ backdoor or the Log4J2 flaws of 2021 — the...
How Do We Integrate LLMs Security Into Application Development?
Question: What do we really know about large language model (LLM) security? And are we willingly opening the front door to chaos by using...
Coinbase’s Vision for the Future of AI and Blockchain Integration
In a recent blog post by Coinbase, the company outlined the burgeoning growth in artificial intelligence (AI) capabilities and their intersection with blockchain technology,...
Patch Now: Critical Fortinet RCE Bug Under Active Attack
As expected, cyberattackers have pounced on a critical remote code execution (RCE) vulnerability in the Fortinet Enterprise Management Server (EMS) that was patched last...
Ivanti Keeps Security Teams Scrambling With 2 More Vulns
Ivanti, whose products have been a big target for attackers recently, has disclosed two more critical vulnerabilities in its technologies — raising more questions...
Session Takeover Bug in AWS Apache Airflow Reveals Larger Cloud Risk
A vulnerability in Amazon Web Services' (AWS) Managed Workflows for Apache Airflow (MWAA) could have allowed hackers to access users' sessions, perform remote code...
In the rush to build AI apps, don’t leave security behind
Feature While in a rush to understand, build, and ship AI products, developers and data scientists are being urged to be mindful of security...
Stealth Bomber: Atlassian Confluence Exploits Drop Web Shells In-Memory
Fresh proof-of-concept (PoC) exploits are circulating in the wild for a widely targeted Atlassian Confluence Data Center and Confluence Server flaw. The new attack...
JetBrains TeamCity Mass Exploitation Underway, Rogue Accounts Thrive
Attacks targeting two security vulnerabilities in the TeamCity CI/CD platform have begun in earnest just days after its developer, JetBrains, disclosed the flaws on...
Cloud-y Linux Malware Rains on Apache, Docker, Redis & Confluence
Researchers have spotted a concerted cyber compromise campaign targeting cloud servers running vulnerable instances of Apache Hadoop, Atlassian Confluence, Docker, and Redis. The attackers...
Over 100 Malicious Code-Execution Models on Hugging Face
Researchers have unearthed over 100 malicious machine learning (ML) models on the Hugging Face AI platform that can enable attackers to inject malicious code...
Hugging Face AI Platform Riddled With 100 Malicious Code-Execution Models
Researchers have discovered about 100 machine learning (ML) models that have been uploaded to the Hugging Face artificial intelligence (AI) platform and potentially enable...
ConnectWise ScreenConnect Mass Exploitation Delivers Ransomware
Just days after initial exploitation reports started rolling in for a critical security vulnerability in the ConnectWise ScreenConnect remote desktop management service, researchers are...
Latest Intelligence
