Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Four Microsoft SharePoint Server vulnerabilities are under active exploitation, prompting CISA to issue a hardening alert.
Four Microsoft SharePoint Server vulnerabilities are under active exploitation, prompting CISA to issue a hardening alert.
Microsoft highlights the growing risks of AI agents operating without proper identity and access controls, emphasizing the need for least-privilege principles. AI agents, which autonomously chain actions across systems, can inadvertently access or modify sensitive data if assigned overly broad permissions.
<button class="btn-collapse" type="button" aria-expanded="true"...
AhnLab SEcurity intelligence Center (ASEC) previously disclosed an attack case in which the Kimsuky group used spear phishing attacks to install the PebbleDash malware in a post titled “Analysis of the Kimsuky Group’s Latest Attacks Exploiting PebbleDash and RDP Wrapper” [1].
This article reports on the Kimsuky group's latest attacks, where they impersonate diplomats and use spear phishing to install PebbleDash malware. AhnLab's ASEC provides analysis of the attack techniques and malware.