CSO Online پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۲:۳۰

Building incident playbooks for machine identity breaches

Pull up your SOC’s compromised account playbook and read through the first 15 minutes. Most SOCs begin their response by calling or messaging the user via Teams to ask whether the 2:00 am sign-in from an unfamiliar country was indeed them. Their subsequent actions depend upon what the user responds with. Try that with a service account, and you’ll be waiting a long time. The same goes for an API key buried in a build…

نشت داده هوش تهدید رایانش ابری پاسخ به رخداد و جرم‌یابی امنیت هویت و دسترسی

خواندن متن کامل در CSO Online درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

CSO Online جمعه ۱۵ آبان ۱۴۰۵ · ۱۵:۰۷

Railway’s AI agents go off the track on a rival’s network

AI agents operated by cloud infrastructure and application hosting platform, Railway, have attempted to access a rival platform’s infrastructure, prompting the cloud provider’s leadership to acknowledge the incident on social media. Railway senior product engineer Jake Runzer acknowledged running agents to perform signups and agentic testing on similar platforms after Primcloud founder Josh Manders publicly questione…

آسیب‌پذیری و روز صفر نشت داده امنیت ابری

منبع

Ubuntu Security Notices جمعه ۱۵ آبان ۱۴۰۵ · ۱۵:۰۰

USN-9003-1: Linux kernel (NVIDIA) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to c…

آسیب‌پذیری و روز صفر امنیت اینترنت اشیا و صنعتی توسعه موبایل

منبع

Ubuntu Security Notices جمعه ۱۵ آبان ۱۴۰۵ · ۱۴:۵۲

USN-9002-1: Linux kernel (NVIDIA Tegra) vulnerabilities

It was discovered that the io_uring subsystem in the Linux kernel did not properly handle canceled task work when processing certain wait operations, leading to the operation being performed in the wrong task context. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2026-81010) Several security issues were discovered in the Linux kernel. An attacker could possibly use these t…

آسیب‌پذیری و روز صفر بات‌نت و DDoS رایانش ابری

منبع

CSO Online جمعه ۱۵ آبان ۱۴۰۵ · ۱۴:۴۴

CPython flaw exposes AI inference servers to sandbox escape attacks

A memory-safety flaw in CPython can allow malicious AI model templates to escape code sandboxes and execute arbitrary code inside inference servers, according to security researchers at RunSybil. “By exploiting this vulnerability, attackers could gain a foothold inside servers responsible for processing millions of user requests,” Darius Houle, a security researcher at RunSybil, wrote in a blog post. “They also could…

آسیب‌پذیری و روز صفر امنیت هوش مصنوعی امنیت زنجیره تأمین

منبع