Rubrika: Aktuálně

ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. A search answer. A coding tool. A link you have clicked a hundred times before. That is the thread running through the pile. Trusted paths get poisoned. Old bugs find new jobs. AI tools leak more than expected. Fake…

Aktuálně

Exposed GitLab project email addresses let attackers push code

Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support pages used to collect bug reports. […]

Aktuálně

DOPLNĚNO: Soud vrátil CNN, MS NOW a Politico přístup do Bílého domu

Novináři CNN, MS NOW a serveru Politico se mohou vrátit do Bílého domu. Federální soudce Timothy Kelly nařídil zodpovědným úředníkům, aby jim okamžitě obnovili stálé akreditace. Zde je zdroj

Aktuálně

FedRAMP VDR & VER: Daily Scans Are Only the Beginning

FedRAMP’s new VDR and VER requirements make vulnerability management more continuous, with faster scanning, tighter remediation deadlines, and stronger evidence requirements. Anecdotes explains why the December 7 deadline is just the beginning of a broader shift toward continuous, automated compliance validation. […]

Aktuálně

Hackers now exploit critical Roundcube flaw in code injection attacks

A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security. […]

Aktuálně