Help Net Security چهارشنبه ۶ آبان ۱۴۰۵ · ۱۷:۵۶

Swimlane connects custom detections to AI-led investigation and response

Swimlane has announced new capabilities in the Swimlane Turbine platform that allow security teams to run their own detection logic against large volumes of data and send resulting alerts directly into Swimlane AI SOC for investigation and response. The October release also adds two-way Model Context Protocol (MCP) support and new Hero AI agent that uses natural-language prompts to build applications for any use case…

Incident Response & Forensics

Read the full article at Help Net Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

EFF پنجشنبه ۷ آبان ۱۴۰۵ · ۲۰:۳۰

Tech Tips for Parents this Digital Parenting Week

In today’s digital world, the internet is an essential resource for young people to access information, explore community, and find themselves. But we know that this often comes alongside fears of experiencing online harms like doxxing, grooming, or bullying. Trying to protect your family from everything all the time is impractical and exhausting, but some thoughtful planning can help families devise a workable plan…

Cryptography Incident Response & Forensics Identity & Access Security

منبع

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۹:۵۵

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls

China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed that attackers are crashing its firewalls with a newly disclosed vulnerability. VMware ESX zero-day helped Chinese spies cover their tracks Chinese APT group Warp Panda has leverage…

Vulnerabilities & Zero-Day Threat Intelligence Operating Systems

منبع

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۸:۱۹

Yoba malware hides in fake desktop versions of ChatGPT and Claude

Fake GitHub projects posing as desktop versions of ChatGPT and Claude have been used to spread a malware chain that ends with a cryptocurrency miner, Check Point has found. The researchers have been tracking the campaign, dubbed Yoba, for the past two months. Its operator set up repositories and GitHub.io pages for supposed apps called GPT-5.6 Sol, GPT-6 Astra and Claude Opus, and hosted the malware as ZIP releases o…

Malware & Threats

منبع

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۷:۴۰

Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop

Forever Security found ways out of the built-in browsers in five AI coding assistants: Cursor, GitHub Copilot, OpenAI’s Codex, Microsoft’s VS Code and Anthropic’s Claude Desktop. In all five, a web page or a local file reached the computer behind the browser. Cursor ran attacker code, Copilot showed a fake address, and Codex, VS Code and Claude Desktop let a single local file read the rest of the disk. Two of those h…

Vulnerabilities & Zero-Day

منبع