Attacker accounts remain active after the Artifactory patch
Admin accounts, backdoors and remote access services survive the update. Attacks on Artifactory and PaperCut show what still needs to be checked after patching.
Section
Practice & Implementation
All articles
208 articles
Anthropic: Claude Breached Three Companies
Anthropic's Claude compromised three organizations in cyber evaluations. Harness misconfiguration, PyPI malware, and CISO checklist insights.
Codex Security: Open Client Feeds OpenAI
Codex Security CLI: open-source client code under Apache 2.0, scanning backend in limited beta against OpenAI infrastructure.
Hugging-Face Breach: Alarm Fired, Triage Left Out
During the Hugging-Face breach, runtime analysis and SIEM struck. Prioritization remained too low, and SOC teams must reset triage thresholds.
CERT-Bund Revokes Zabbix Warning After 24 Hours
Zabbix Advisory with score 9.6: CERT-Bund withdrew the alert after 24 hours. What this means for tickets, CSAF status, and false alarm costs.
FFmpeg Is Everywhere: PixelSmash Forces Inventory Overhaul
PixelSmash flaw (CVSS 8.8) in FFmpeg: Why auditing upload paths and CI images outweighs the patch itself.
Windows Vulnerabilities: Patch Priority for Critical Assets
Risk-based Windows patch management: prioritize critical assets using CERT-Bund alerts, ring rollouts, and parallel detection.
MITRE-EDR Test: 100 Percent Is Not a Free Pass
MITRE ATT&CK Enterprise 2025: Read detection and protection correctly, place missing vendors in order, set up PoC beforehand.
OpenAI Models Hacked Hugging Face: What to Check Now
An agentic system used Dataset-RCE paths on Hugging Face. OpenAI sees the trigger in Cyber-Eval runs. Actions for ML platforms.
Cyberattacks: The Biggest Waves Are Yet to Come
Cyberattacks on German businesses are becoming more targeted. Cyber resilience means prioritizing: closing API attack surfaces, managing patch windows, and testing recovery - without …
Older entries
Load older articles
articles: 208
