Orca Security سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۶:۳۰

Shadow AI Generated Apps: Find Them in the Cloud and Code You Already Scan

The Orca Research Pod recently found that 51% of organizations have adopted AI to build software, yet 81% have critical vulnerabilities in AI packages (Hacker Valley News, 2026). In 2025, CVE-2025-48757 showed how a single missing database policy in AI-generated Supabase projects exposed data across more than 170 production apps. None of these apps went […]

Vulnerabilities & Zero-Day Databases

Read the full article at Orca Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

SOCRadar چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۷:۴۳

SOCRadar MCP: 126 Tools and the New MSSP MCP Server

Security analysts already ask AI assistants to summarize CVEs, draft reports and explain unfamiliar techniques. Ask the same assistant which of your domains were impersonated this week, and it can only guess: it has no view of your alarms, your assets or your executives’ leaked credentials. The SOCRadar MCP Server closes that gap. Serving customers […]

Malware & Threats Vulnerabilities & Zero-Day Ransomware

Source

SecurityWeek چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۷:۲۸

Asus, Zoom Release Security Patches

Attackers could exploit them for command execution, memory overwrites, and privilege escalation. The post Asus, Zoom Release Security Patches appeared first on SecurityWeek.

Vulnerabilities & Zero-Day

Source

Malwarebytes Blog چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۷:۱۲

Remus malware claims Gmail access even after you change your password

Developers of the infostealer Remus claim their malware can retain access to a victim’s Gmail even after a password reset.

Malware & Threats Vulnerabilities & Zero-Day Threat Intelligence

Source

SecurityWeek چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۷:۰۷

Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities

Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts. The post Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities appeared first on SecurityWeek.

Vulnerabilities & Zero-Day

Source