New Abuse of the ClickOnce Technology: Part 2
Following our deep dive into the internals of ClickOnce application deployment in Part 1 of this two-part blog series, let’s focus on the security implications of this technology. In this…
-
-
Cato CTRL Threat Brief: AI, Zero-Days, and the US-China Cyber Arms Race
TL;DR Underlying the US–China AI race, there’s arguably a more sinister arms race—the race to identify zero-day threats. Frontier AI algorithms, such as Anthropic Mythos (here) and China’s Qihoo 360…
-
Why AI Agents Are Making Database Activity Monitoring Critical Again
Database security and AI security are converging. Neither can function effectively in isolation. A modern solution requires combining execution‑level truth from DAM with intent, actor, and task context from AI‑aware security platforms.
-
Impact on vulnerability remediation| Tenable®
CISA issued BOD 26-04, which replaces BOD 22-01 with a four-variable vulnerability prioritization model requiring federal agencies to patch the most dangerous vulnerabilities in as few as three days. Key…
-
Uncloaking VoidProxy: a Novel and Evasive Phishing-as-a-Service Framework
Okta Threat Intelligence has published a detailed analysis on a previously unreported Phishing-as-a-Service (PhaaS) operation, which its authors name VoidProxy. VoidProxy is a novel and highly evasive service used by…
-
The Essence of Black Hat – Collaboration with Partners
As is tradition at every Black Hat conference, Day 1 winds down with a quick reality check – what’s done, what’s broken, and what absolutely needs to go live by tomorrow. Despite…
-
Chromium extension uses AI‑related branding to redirect browser search
In this article Microsoft Threat Intelligence has identified a malicious Chromium-based extension that spoofs the AI-powered answer engine Perplexity AI to trick unsuspecting users into installing it. Based on our…
-
Cavern Manticore: Exposing Iran-Linked Modular C2 Framework
Key Points Check Point Research (CPR) tracks ‘Cavern Manticore’ as an Iran-nexus threat actor operating against Israeli targets, with a focus on the government and IT sectors. Cavern Manticore shares…
-
Your Worker can now have its own cache in front of it
Today we are launching Workers Cache: a tiered cache that sits in front of your Worker, configured by a single line of Wrangler config and the same Cache-Control headers you…
-
A Day With Your Vector Command Red Team Pod
Anyone trying to understand continuous red teaming usually gets the same high-level explanation: it is ongoing, attacker-informed, and designed to uncover risk between formal assessments. Useful as that description is,…
