UNIX CONSULTINGIT security, defense and AI compliance
Back to site
Cybersecurity archive
This archive keeps previously published signals available through stable indexed URLs and makes older alerts easier to browse.
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network. Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
View CSAF Summary Successful exploitation of these vulnerabilities could allow for an attacker to perform a man-in-the-middle... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
View CSAF Summary Successful exploitation of this vulnerability could result in memory corruption, a device crash, or a potential... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to perform remote code execution on the... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
CISA and the Group of Seven (G7) Cyber Security Working Group released Preparing for the Post-Quantum Era: A Call to Action... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
View CSAF Summary Successful exploitation of these vulnerabilities could result in a loss of webserver availability or allow an... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
View CSAF Summary Successful exploitation of this vulnerability could give an attacker the ability to run any commands or code of... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
View CSAF Summary Schneider Electric is aware of a vulnerability in the following products: The Easergy C5 is a scalable and... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to take control of a high-privilege... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
View CSAF Summary Successful exploitation of this vulnerability could allow any authenticated user to create projects. The... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
View CSAF Summary Successful exploitation of these vulnerabilities could result in an attacker accessing sensitive credentials,... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
View CSAF Summary Successful exploitation of this vulnerability could crash the module. The device requires a restart to recover.... Unix Consulting read: This signal should be mapped against the application inventory, internet exposure and patch-management process. The key point is not only the...
An RMM phishing campaign initially associated with Canadian targeting due to its use of Canada Revenue Agency (CRA) tax forms as... Unix Consulting read: This signal relates to AI usage, assistants, models or data handled by these systems. It should be read through a governance lens: which data enters...
Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy malicious... Unix Consulting read: This topic relates to a campaign, malware or intrusion technique. The operational value is to translate it into detections, filtering rules, targeted...