UNIX CONSULTINGIT security, defense and AI compliance
Back to site
Cybersecurity archive
This archive keeps previously published signals available through stable indexed URLs and makes older alerts easier to browse.
Threat actors are increasingly switching from AI-powered coding assistants to multi-agent frameworks that automate every stage of... Unix Consulting read: This signal relates to AI usage, assistants, models or data handled by these systems. It should be read through a governance lens: which data enters...
Microsoft warned customers last week that they may experience application crashes on some Windows Server 2025 due to recent... Unix Consulting read: This signal deserves fast qualification: affected asset, exposure, potential impact, urgency and internal owner. The value comes from turning the...
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing in the directory and end... Unix Consulting read: This signal relates to AI usage, assistants, models or data handled by these systems. It should be read through a governance lens: which data enters...
Dubbed MikroTrick, the bugs allow attackers to bypass authentication, overwrite configuration files, and take over devices. The... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
Hackers stole the information of students, teachers, staff, and parents/guardians from a self-hosted Metabase instance. The post... Unix Consulting read: This signal deserves fast qualification: affected asset, exposure, potential impact, urgency and internal owner. The value comes from turning the...
Administrators are advised to check their deployments for newly created user accounts they don’t recognize. The post N-able... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves... Unix Consulting read: This signal relates to AI usage, assistants, models or data handled by these systems. It should be read through a governance lens: which data enters...
Exclusive: An exposed Advance Passenger Information System (APIS) database held 220 million passenger and crew records containing... Unix Consulting read: This signal relates to AI usage, assistants, models or data handled by these systems. It should be read through a governance lens: which data enters...
Online dating app Grindr has opted to pay £26 million ($35.1 million) to settle a lawsuit in the U.K. over allegations that it... Unix Consulting read: This signal relates to AI usage, assistants, models or data handled by these systems. It should be read through a governance lens: which data enters...
This signal relates to AI usage, assistants, models or data handled by these systems. It should be read through a governance lens: which data enters the tool, which access is granted and which traces remain auditable. Review handled data, connectors and...
Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that... Unix Consulting read: This signal relates to AI usage, assistants, models or data handled by these systems. It should be read through a governance lens: which data enters...
A zero-day vulnerability dubbed "StyleSmuggler" affecting all versions of Magento and Adobe Commerce is being exploited in... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and... Unix Consulting read: This signal relates to AI usage, assistants, models or data handled by these systems. It should be read through a governance lens: which data enters...
A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and... Unix Consulting read: This topic concerns access, identity or social engineering. It is often a transversal entry point: a low-level user incident may become critical if...
Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code built out... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
Online maths learning platform Mathspace disclosed over the weekend that attackers stole data from more than 1 million students,... Unix Consulting read: This signal deserves fast qualification: affected asset, exposure, potential impact, urgency and internal owner. The value comes from turning the...