Aggregator

Two more GitHub Actions workflows have become the latest to be compromised by credential-stealing malware by a threat actor known as TeamPCP, the cloud-native cybercriminal operation also behind the Trivy supply chain attack. The workflows, both maintained by the supply chain security company Checkmarx, are listed below - checkmarx/ast-github-action checkmarx/kics-github-action Cloud security

Tuskira has released its Federated Detection Engine, a new capability within its Agentic SecOps platform that enables real-time threat detection across cloud, identity, endpoint, network, SaaS, infrastructure, and legacy SIEM environments, without relying on centralized logging. Detection engineering still depends on centralized log architectures and manual rule authoring. That model is expensive to scale, slow to adapt, and increasingly misaligned with how modern attacks move across distributed environments. Tuskira takes a different approach by bringing … More →

The post Tuskira replaces centralized detection model with real-time, distributed approach appeared first on Help Net Security.

Russian cybercriminal Aleksei Volkov has received close to seven years behind bars for role in Yanluowang ransomware

Mozilla 于 3 月 24 日释出了 Firefox 149。主要变化包括：用 Rust 语言开发的 JPEG-XL 图像解码器 jxl-rs 取代了旧的用 C++ 开发的解码器；更快的 PDF 文件处理速度，通过右键上下文菜单从 PDF 中下载图像； 改进 HTTP/3 上传性能；内置 VPN（目前只提供给美国等少数地区），每月免费流量 50GB，等等。

Что случается, когда Larva-26002 находит MS-SQL со слабым паролем.

在基于大模型的 AI 辅助编程日益流行的时代，是否会出现为 AI 优化而不考虑人类可读性的编程语言？已有实验在尝试为提高大模型效率而最小化词元（tokens）。AI 是促使源码进化还是导致它灭绝？我们能否让 AI 直接从提示词生成一种中间语言然后将其输入到解释器或编译器？未来是否还需要高级语言？去年 10 月 IEEE Spectrum 召开了一个网络研讨会讨论了 AI 是否会导致编程语言消失。高级语言是人类使用的语言，我们完全可以让 AI 直接生成中间语言，而未来的程序员仍然可以做出与接口、算法以及其它架构相关的设计决策。最终生成的代码仍然需要通过测试，能解释它正在做什么。

ANY.RUN spoke with the Interim CISO and Director of Cyber Operations at Health Shared Services, who provided insights into how their team addressed alert fatigue, improved MTTD and MTTR, and strengthened their investigation workflow with ANY.RUN.  In this new addition to our success story series, we explore how the healthcare organization’s SOC team improved detection, triage, and response efficiency while maintaining the existing operational processes.  Organization Overview  Health Shared Services is a healthcare support organization based in Alberta, Canada.  Its SOC team consists of 16 […]

The post Canada-Based Organization Health Shared Services Accelerates SOC Investigations with ANY.RUN  appeared first on ANY.RUN's Cybersecurity Blog.

速修复

速修复

Visa CISO Subra Kumaraswamy on Securing Agents, Fighting Fraud, Protecting Commerce
AI is transforming trust in global payments as attackers scale faster and agents automate decisions. CISO Subra Kumaraswamy explains how Visa uses AI to combat fraud, secure transactions and build trust across consumers, merchants and a rapidly evolving digital ecosystem.

Раньше это называли шпионажем, а сейчас просто «полезным обновлением».

Roadmap Focuses on OT Security, Grid Hardening and Incident Response
A new Department of Energy strategy defines its role as sector risk manager for grid security, prioritizing OT defense, resilience and response - but analysts say it faces execution challenges tied to reduced funding, workforce constraints and reliance on weakened federal partners.

IT Worker Scheme, Laptop Farm Siphon Funds Back to North Korea
A U.S. federal judge sentenced a now-former Army soldier to one year in prison Friday for renting his identity to North Korean IT workers who used it to collect more than $193,000 in salaries from American companies. Also sentenced were two California men who facilitated $1.28M in fraudulent salaries.

J.P. Morgan’s Brian Essex on Why Valuations Drop as Fundamentals Hold Steady
Investor anxiety over AI's long-term impact is dragging down stock valuations despite steady growth and profitability, while companies focus on long-term valuation assumptions and secure business models, said Brian Essex, executive director of U.S. software equity research at J.P. Morgan.

Visa CISO Subra Kumaraswamy on Securing Agents, Fighting Fraud, Protecting Commerce
AI is transforming trust in global payments as attackers scale faster and agents automate decisions. CISO Subra Kumaraswamy explains how Visa uses AI to combat fraud, secure transactions and build trust across consumers, merchants and a rapidly evolving digital ecosystem.

As IT infrastructure expands, visibility and control often lag behind – until an incident forces a reckoning

HumanBug15 年实战经验，手把手教落地

黑客借Firebase测试邀请发起安卓钓鱼攻击

0月24日 上海西岸 人类黑客 vs. AI