How a zero-click MCP attack turns a shared Google Doc into remote code execution, stolen secrets, and enterprise-wide compromise.   #attack   #gsuite   #ai

The article discusses security vulnerabilities in AWS Code Interpreters, particularly focusing on sandboxed environments, and demonstrates that even sandboxed interpreters can access certain AWS services like S3, and their role credentials can be extracted through the Metadata Service.   #aws   #attack   #iam

A vulnerability in Electron applications allows attackers to bypass code integrity checks by tampering with V8 heap snapshot files, enabling local backdoors in applications like Signal, 1Password, and Slack.   #attack   #supply-chain   #saas

An advanced threat actor, GRUB1, exploited the integration between Salesloft's Drift chat agent and Salesforce to gain unauthorized access to Salesforce tenants of Cloudflare and many other companies.   #attack   #cloudflare   #saas   #supply-chain

Learn how to detect, investigate, and respond to Salesforce security incidents with logs, permissions, and backups.   #saas   #defend   #monitor

In the wake of recent attacks, it's crucial that Salesforce Admins everywhere review their Connected Apps.   #monitor   #saas

Up-to-date list of organizations impacted by the Salesloft Drift OAuth token compromise targeting Salesforce customers, with links to official statements.   #saas   #monitor   #defend

Malware delivery through Microsoft Teams is an emerging threat. Discover how attackers exploit external chats, which regions they target, and key IOCs defenders must track.   #attack   #defend   #monitor   #saas

A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.   #attack   #supply-chain

This article details how attackers exploit Entra ID through OAuth consent injection and app backdooring, covering attack flows, MITRE ATT&CK mappings, detection strategies, and prevention methods for maintaining persistence in Azure environments.   #attack   #azure   #iam   #defend

Gandalf is a hacking simulator game, which challenges you to break and exploit AI agents in realistic scenarios from multiple angles. Each scenario simulates how a real-world Agentic GenAI application behaves.

Audit and log all GitHub Copilot MCP tool calls in VSCode with ease.

A web application to display data from the event-maturity-matrix framework.

Windows inside a Docker container.

Collaborative forensic timeline analysis.

AWS has introduced three new global condition keys for scalable access controls based on request origin: aws:VpceAccount, aws:VpceOrgPaths, and aws:VpceOrgID.

Although often overlooked, Azure Storage logs can provide invaluable insights for digital forensics, helping investigators reconstruct attacker activity, trace data access patterns, and detect anomalies.