SAP patches a critical memory corruption bug
The huge Microsoft release likely reflects how good AI has become at helping vendors find vulnerabilities, says one expert.
17 juil.
Menaces, vulnérabilités, incidents et bonnes pratiques en sécurité informatique.
1350 articles
S’abonner (RSS)The huge Microsoft release likely reflects how good AI has become at helping vendors find vulnerabilities, says one expert.
The ERP giant is shifting away from multiple-choice questions toward a new model centered on real-world environments, starting with new formats for six certs rolled out at TechEd this week in Berlin.
The unrestricted file upload flaw is likely being exploited by an initial access broker to deploy JSP web shells that grant full access to servers and allow installing additional malware payloads.
But the vulnerability in the Kerberos system also has an exploit, so patch now.
Both the vulnerabilities score above 9 on CVSS and can allow access to sensitive data if not patched immediately.
Elastic Security Labs exposes an attempt by the DPRK to infect blockchain engineers with novel macOS malware.
Obfuscator.io is a powerful JavaScript obfuscator that protects your source code from theft and reverse engineering.
That same intelligence-to-action challenge is at the center of our main stage session at Black Hat. On Wednesday, August 5, 2026, from 2:30 PM PT to 3:00 PM PT, Aarti Borkar, Corporate Vice President (CVP), Microsoft Security, and Tanmay Ganacharya, Vice President of Microsoft Security Research and Threat Intelligence, will share intelligence and insights into the ongoing supply chain campaigns impacting all areas of the threat landscape. The talk, Poisoned at the Source: Inside the Hunt for Sup
Microsoft experts will also lead sessions that give you a closer look behind the scenes, including: Mind the Gap: Turning Threat Intelligence into Decisive Action with Expert-Led Defense Presented by Wes Malaby, General Manager of Customer Success Wednesday, August 5, 2026, from 5:00 PM PT to 5:20 PM PT Presented by Fanta Kaba and special guest Jimmie Galaites Wednesday, August 5, 2026, from 5:00 PM PT to 5:20 PM PT Presented by Naadia Sayed, Principal Product Manager Thursday, August 6
This year we are transforming the Microsoft Security booth into a community center. Click here to jump to the full schedule. If the keynote and main stage sessions frame the largest challenges across the threat landscape, booth #2144 is where you can directly explore the workflows behind it: threat intelligence, incident response, AI security, security operations, partner solutions, and hands-on practice. Customers: Schedule a time to meet with our team
Microsoft Defender XDR customers can use the following threat analytics reports in the Defender portal (requires license for at least one Defender XDR product) to get current information available in the Defender portal about the threat actor, malicious activity, and techniques discussed in this blog. These reports provide the intelligence, protection information, and recommended actions to help prevent, mitigate, or respond to associated threats found in customer environments: Amatera Stealer:
CVE Lite CLI scans lockfiles locally and matches dependencies against the OSV database to surface known vulnerabilities. It supports npm, pnpm, Yarn, and Bun lockfiles and classifies every finding as direct or transitive. Rather than stopping at detection, it generates a ranked remediation plan with copy-and-run upgrade commands for direct dependencies and parent-aware upgrade guidance for transitive chains. The tool is built for the developer workflow: it runs in seconds at the terminal, requir
Expand All + CVE-2025-12011 A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major non-recoverable fault (MNRF). View CVE Details Affected Products Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix Vendor:Rockwell Automation Product Version:Rockwell Automation CompactLogix 5370: <=V35.015, Rockwell Automation Compact GuardLogix 5370: <=V
A security issue exists within Arena Simulation due to a memory corruption vulnerability in the linker.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file. View CVE Details Affected Products Rockwell Automation Arena Vendor:Rockwell Automation Product Ver
Expand All + CVE-2026-60063 An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability. View CVE Details Affected Products AutomationDirect Productivity Suite Vendor:AutomationDirect Product Version:AutomationDirect Productivity Suite: <=v4.6.2.2 Product Status:known_affected Remediations MitigationAutomationDirect recommends that
While LLMs excel at identifying syntax patterns, source code itself rarely contains the full picture of unwritten business intent. Some organizations attempt to solve this by connecting LLM agents to internal wikis, design documents, and issue trackers using retrieval-augmented generation (RAG). While RAG gives the model access to external business context, it is not a perfect fix. Corporate documentation is frequently stale, contradictory, or incomplete. An AI agent might retrieve an outdated a
Achieve a 360-degree, contextual view of your multicloud environment and bolster security with Wiz and Google Cloud.
Nearly half of observed login attempts across websites protected by Cloudflare involved leaked credentials. The pervasive issue of password reuse is enabling automated bot attacks and account takeovers on a massive scale.
La sécurité moderne doit combiner la détection de l'automatisation avec l'authentification d'identité, car les attaquants opèrent à grande échelle en exploitant des fuites de credentials, des fermes de fraude humaine et des identités synthétiques. Les menaces actuelles mélangent l'intention humaine avec l'exécution automatisée, rendant insuffisante une approche basée uniquement sur la détection d'automatisation. Les solutions de prévention de fraude doivent évaluer l'authenticité et l'intégrité des utilisateurs pour résoudre les problèmes de comptes fictifs, d'accès non autorisés et de fraude aux comptes.
If you want to learn more about this Early Access capability, sign up here. All Bot Management Enterprise customers are eligible to add these new Account Abuse Protection features today, and we’d love to open the conversation with any and all prospective Bot Management customers. While bot detections will continue to answer the question of automation and intent, fraud detections delve into the question of authenticity. Together, they give website owners comprehensive tools to fight against the f
We built AI Security for Apps to address this. It sits in front of your AI-powered applications, whether you're using a third-party model or hosting your own, as part of Cloudflare's reverse proxy. It helps you (1) discover AI-powered apps across your web property, (2) detect malicious or off-policy behavior to those endpoints, and (3) mitigate threats via the familiar WAF rule builder.
Firewall for AI discovers and protects your public LLM-powered applications, and is seamlessly integrated with Cloudflare WAF. Join the beta now and take control of your generative AI security.
L'article explique pourquoi les approches défensives traditionnelles en sécurité sont insuffisantes pour protéger les APIs, notamment contre les attaques de broken object level authorization (BOLA) qui exploitent des failles logiques plutôt que syntaxiques. Contrairement aux vulnérabilités web classiques (SQL injection, XSS) qui présentent des signatures détectables, les failles d'autorisation API passent inaperçues aux WAF standards car les requêtes malveillantes respectent la syntaxe et l'authentification. La détection efficace nécessite une analyse passive du trafic pour identifier les anomalies comportementales et les écarts par rapport aux patterns d'utilisation normaux.
Cet article explique comment construire automatiquement des plans de scan de sécurité pour les APIs en analysant les schémas OpenAPI. Le scanner crée un graphe d'appels API et simule des scénarios où des propriétaires créent des ressources et des attaquants tentent d'y accéder avec leurs propres credentials pour détecter les vulnérabilités d'autorisation. La principale difficulté réside dans l'inférence automatique des dépendances de données entre les endpoints, qui ne figurent pas dans les spécifications OpenAPI.