Identity & Access Management

OpenSSH Comma Parsing Flaw Enables Silent Root Logins

Security

OpenSSH Comma Parsing Flaw Enables Silent Root Logins

From Benign Commas to Root Shells: How a Tiny Parsing Quirk Became a 15-Year TrapSeasoned defenders call it the most humbling kind of bug: one stray comma in a principal field that lets a valid SSH certificate unlock root while logs nod along as if n

Security AI Rush Revives Old Security Lapses, Warns Mandiant

Boardrooms cheered record AI rollouts while basic safeguards frayed, and attackers quietly slipped through reopened cracks. The tension between speed and security was no longer theoretical; it was surfacing in real incidents where sanctioned AI projects stumbled on fundamentals long considered

AI Rush Revives Old Security Lapses, Warns Mandiant
Analytics Intelligence Will Execution-Level IAM Close AI's Attribution Gap?

Malik Haidar has spent years in the trenches of multinational security, closing the distance between boardroom priorities and frontline incident response. He treats identity not just as a login but as a living system spanning humans, non-human services, and fast-moving agentic AI. In this

Will Execution-Level IAM Close AI's Attribution Gap?
Security Is Worm-Like npm Malware Targeting Developers and PyPI?

A Breach That Started With a Build One routine command at a terminal—npm install—had quietly become a launchpad for theft, persistence, and lateral movement that traveled farther than most developers ever expected their tools could carry. Researchers at Socket reported a live campaign hiding inside

Is Worm-Like npm Malware Targeting Developers and PyPI?
Analytics Intelligence Did Insider Misuse Put UK Biobank’s Data Up for Sale?

Janine Saintos sits down with Malik Haidar, a cybersecurity expert known for bridging business priorities with rigorous threat intelligence. He unpacks how a dataset connected to roughly 500,000 research volunteers surfaced abroad, what moved the needle in the first 24 hours, and how a UK-hosted,

Did Insider Misuse Put UK Biobank’s Data Up for Sale?
Analytics Intelligence AI Supercharges Vulnerability Discovery—And Raises the Bar

Bugs that once hid for months now surface in hours as AI tears through codebases, configs, and clouds, collapsing the gap between discovery and attack while regulators recalibrate what counts as reasonable security. That shift is not abstract; it is operational, legal, and commercial all at once.

AI Supercharges Vulnerability Discovery—And Raises the Bar
Security Can PhantomRPC Turn Missing RPC Servers Into SYSTEM Access?

Windows RPC Trust Boundaries, Market Actors, and Why PhantomRPC Resonates Now When privileged Windows clients reach for familiar RPC servers that happen to be missing, the runtime’s willingness to accept a substitute responder can turn a routine call into an identity handoff that elevates l

Can PhantomRPC Turn Missing RPC Servers Into SYSTEM Access?
Loading
subscription-bg
Subscribe to Our Weekly News Digest

Stay up-to-date with the latest security news delivered weekly to your inbox.

Invalid Email Address
subscription-bg
Subscribe to Our Weekly News Digest

Stay up-to-date with the latest security news delivered weekly to your inbox.

Invalid Email Address