Understanding Claude Tag’s access model in Slack
Anthropic’s new AI agent for Slack acts under an admin-configured access bundle rather than each user’s own credentials. Here’s how that model works, what admins should understand and how to…
-
-
Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery
In this article On July 14, 2026, Microsoft Threat Intelligence identified a coordinated supply chain compromise of the @asyncapi npm organization, a widely used set of packages for the AsyncAPI…
-
Investigating Persistence Mechanisms in AWS
Overview In the cloud, your infrastructure may be short-lived, but an attacker’s persistence doesn’t have to be. While your environment scales and changes in seconds, adversaries are embedding themselves into…
-
RabbitMQ Vulnerabilities Could Enable Unauthenticated Broker Takeover
Miggo researchers discovered two vulnerabilities that could allow attackers to seize control of vulnerable message brokers or expose data across shared environments. While there is no evidence either vulnerability has…
-
NPM ecosystem hit with two new supply chain compromises
Initially the attackers released new package versions with two malicious scripts that get executed at install time using a preinstall hook in the configuration script. The scripts also execute platform-specific…
-
Weekly Threat Bulletin – March 11th, 2026
Security Alert: Android March 2026 Update Targets Actively Exploited Zero-Day Google has released its March 2026 Android Security Bulletin, a substantial update addressing 129 vulnerabilities, including at least one actively…
-
Welcome to AI pentesting – add on-demand AI assistance directly to your workflow with new, agentic Burp AI capabilities | Blog
Amelia Coen | Wednesday, 24 September 2025 at 14:17 UTC Whether you’re navigating a client pentest or chasing a bounty target, even the most experienced testers hit roadblocks, burn time…
-
When Sensitive Data Becomes a Picture: Introducing ML-Powered Image Classification for DLP
Dr. Carter finishes a long shift at the hospital, exports a patient X-ray as a regular image file, and drags it into an AI assistant to double-check a diagnosis. The…
-
How CrowdStrike Is Defining the Next Era of Cybersecurity
With great autonomy comes great risk. Agents can be compromised by adversaries; they can also create unintended security risks and accidentally cause breaches via misalignment. For example, in early 2026,…
-
SonicWall CVE-2026-15409 and CVE-2026-15410 zero-day exploited
SonicWall patched two recently exploited zero-day vulnerabilities in its SMA 1000 Series secure remote access appliances which may have been chained for unauthenticated remote code execution. Key takeaways CVE-2026-15409 and…
