Cyber operations by Iran-linked groups used AIS and CCTV intelligence to support real-world missile attacks, Amazon reports.
TamperedChef spreads through fake installers and SEO abuse, delivering a persistent JavaScript backdoor across multiple ...
The vulnerability in question is CVE-2025-11001 (CVSS score: 7.0), which allows remote attackers to execute arbitrary code.
Eternidade Stealer spreads via WhatsApp hijacking, using Python scripts and IMAP-driven C2 updates to target Brazilian users.
Granular application containment reduces overreach, blocks lateral movement, and cuts SOC alerts by up to 90%.
Second-order prompt injection exploits ServiceNow agent discovery, enabling unauthorized actions unless configurations and monitoring are tightened.