CyberPulse Cybersecurity News, with Source Links
FA
CSO Online

Building incident playbooks for machine identity breaches

Pull up your SOC’s compromised account playbook and read through the first 15 minutes. Most SOCs begin their response by calling or messaging the user via Teams to ask whether the 2:00 am sign-in from an unfamiliar country was indeed them. Their subsequent actions depend upon what the user responds with. Try that with a service account, and you’ll be waiting a long time. The same goes for an API key buried in a build…

Data Breach Threat Intelligence Cloud Computing Incident Response & Forensics Identity & Access Security
Read the full article at CSO Online Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
CSO Online

Railway’s AI agents go off the track on a rival’s network

AI agents operated by cloud infrastructure and application hosting platform, Railway, have attempted to access a rival platform’s infrastructure, prompting the cloud provider’s leadership to acknowledge the incident on social media. Railway senior product engineer Jake Runzer acknowledged running agents to perform signups and agentic testing on similar platforms after Primcloud founder Josh Manders publicly questione…

Vulnerabilities & Zero-Day Data Breach Cloud Security
Source
Ubuntu Security Notices

USN-9003-1: Linux kernel (NVIDIA) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to c…

Vulnerabilities & Zero-Day IoT & OT Security Mobile Development
Source
Ubuntu Security Notices

USN-9002-1: Linux kernel (NVIDIA Tegra) vulnerabilities

It was discovered that the io_uring subsystem in the Linux kernel did not properly handle canceled task work when processing certain wait operations, leading to the operation being performed in the wrong task context. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2026-81010) Several security issues were discovered in the Linux kernel. An attacker could possibly use these t…

Vulnerabilities & Zero-Day Botnet & DDoS Cloud Computing
Source
CSO Online

CPython flaw exposes AI inference servers to sandbox escape attacks

A memory-safety flaw in CPython can allow malicious AI model templates to escape code sandboxes and execute arbitrary code inside inference servers, according to security researchers at RunSybil. “By exploiting this vulnerability, attackers could gain a foothold inside servers responsible for processing millions of user requests,” Darius Houle, a security researcher at RunSybil, wrote in a blog post. “They also could…

Vulnerabilities & Zero-Day AI Security Supply Chain Security
Source