Tenable Research discovered two novel vulnerabilities in Google Looker that could allow an attacker to completely compromise a Looker instance.   #attack   #gcp   #saas

Find out more about how passkeys can be used across devices using a mechanism called Hybrid transport.   #explain   #iam

This article introduces Slack's Anomaly Event Response (AER), an automated security system that detects suspicious activities and terminates user sessions in real-time, reducing detection-to-response gaps from hours to minutes.   #defend   #monitor   #strategy

See how attackers exploited misconfigurations in Selenium Grid, Spring Boot, and PostgreSQL to gain full access.   #attack

Docker Sandboxes now offer microVM isolation for macOS and Windows, enabling coding agents like Claude Code to run unsupervised in disposable environments. Features include hypervisor-based isolation, safe Docker-in-Docker execution, and network controls for secure autonomous agent operation.   #announcement   #ai   #containers

Mature enterprises lock down egress but often carve out broad exceptions for trusted cloud services. This post shows how reviewing deployment guides can help identify those exceptions and weaponize them with a new Mythic C2 profile called azureBlob.   #azure   #attack

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

Julius is an LLM service fingerprinting tool for security professionals. It detects which AI server software is running on network endpoints during penetration tests, attack surface discovery, and security assessments. You can also refer to the companion blog post.

Security Scanner for Agent Skills.

An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports NLP, pattern matching, and customizable pipelines.

Manage multiple AWS SSO organizations with separate config files.

Doyensec audited Outline OSS wiki, discovering seven vulnerabilities using manual testing over 60 person-days. Three AI security platforms were tested in parallel but produced overwhelming false positives requiring 40 hours to validate, demonstrating AI tools currently cannot replace experienced human auditors for quality security engagements.

The fastest-growing personal AI agent ecosystem just became a new delivery channel for malware. Over the last few days, VirusTotal has detected hundreds of OpenClaw skills that are actively malicious.