Latest security news

Using autonomous AI agents, an attacker breached an enterprise network in a matter of hours. Understand how to address and defend against agentic attacks.

Ministers reject proposed red lines and emergency shutdown powers, pointing instead to voluntary safeguards

SonicWall has urged customers to patch two new zero-day vulnerabilities being exploited in the wild

Threat group FulcrumSec claims MAG breach and leaks 550GB of data online

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Threat actors exploited commodity vulnerabilities in ownCloud to gain initial access, resulting in stolen reactor databases, personnel records, and credential stores.

23-year-old botnet down

A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphoning images collected by a widely-used identity verification company based in Louisiana. KrebsOnSecurity also has learned that the New Orleans field office of the Federal Bureau of Investigation (FBI) today launched an official inquiry into the source of the images.

Introduction

Unauthenticated intruders can mint admin tokens, and exposed servers are already being hit