#lateral-movement

[ follow ]
#privilege-escalation #fortigate #generative-ai #credential-stuffing #agentic-ai #ai-security #microsegmentation
Information security
fromTheregister
2 weeks ago

AWS says 600+ FortiGate firewalls hit in AI-augmented attack

AI-assisted criminals rapidly compromised over 600 internet-exposed FortiGate firewalls across 55 countries by credential-spraying defenses and exfiltrating configurations to pivot internally.
Information security
fromZDNET
1 month ago

Microsoft and ServiceNow's exploitable agents reveal a growing - and preventable - AI security crisis

Agentic AI with broad network privileges enables lateral movement, creating severe escalation and unauthorized access risks that make securing agents extremely challenging.
fromNextgov.com
2 months ago

Microsegmentation: the unsung hero of cybersecurity (and why it should be your top priority)

Think of your network like an apartment building. You've got a locked front door - that's your perimeter. But once someone gets inside, there's no front desk checking IDs, no elevator security and the same outdated lock on every unit. An intruder can roam freely, entering any apartment they choose. Microsegmentation is the internal security system. It's the keycard for the elevator, the camera in the hallway, the unique lock on your door. It's what stops one compromised device from becoming a full-blown breach.
Information security
Information security
fromChannelPro
2 months ago

When everything connects, everything's at risk

The proliferation and interconnection of IoT and OT devices enlarge attack surfaces, enabling lateral movement that exposes critical systems and demands improved detection and containment.
Information security
fromSecurityWeek
5 months ago

GeoServer Flaw Exploited in US Federal Agency Hack

CVE-2024-36401 RCE in GeoServer enabled attackers to breach a federal agency, deploy web shells, move laterally, and maintain persistence for weeks.
Information security
fromForbes
6 months ago

5 Pressing Cybersecurity Challenges Every Business Must Address

Businesses must adopt integrated Zero Trust, identity-centric controls, monitoring, and least-privilege practices to mitigate hybrid workforce, insider threats, lateral movement, cloud, and vendor risks.
[ Load more ]