Organization
5 Interestana reports mention The Hacker News, newest first. Each links back to its publisher, with an AI summary of the original reporting where we have found no publisher terms that forbid one.
Unowned AI agents operating within networks pose a significant insider threat by storing sensitive credentials and accessing internal systems without oversight. Experts question classifying these agents as mere productivity tools given their potential for risk.
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10.
Security teams can run deepfake readiness drills to identify verification breakdowns before cloned voices are used in payment fraud, help desk resets, and access requests.
An AI pentesting agent discovered a critical authentication bypass vulnerability on a major insurer's production website during an authorized assessment. The bug allowed users to choose where their one-time passcode was sent, making the attack itself relatively simple.
Picus Security hosted a webinar on October 26, 2023, addressing the potential security risks masked by seemingly clean automated penetration testing reports. The webinar highlighted that as automated pentesting tools are run repeatedly, the number of new findings typically decreases…