Enterprise Security Tech

The US Cybersecurity and Infrastructure Security Agency and five international cybersecurity agencies have released new guidance on securing Microsoft Active Directory, detailing 17 techniques attackers commonly use to compromise enterprise identity systems. The threat list includes Kerberoasting, AS-REP Roasting, password spraying, DCSync, Golden Ticket attacks, certificate abuse and the exploitation of insecure delegation settings. None of these techniques is particularly n

The autonomous cybersecurity system tests external exposure against internal architecture, security controls and existing risk data to help organizations separate reachable threats from scanner noise. Security teams rarely lack vulnerability data. The harder problem is determining which weaknesses attackers can actually exploit. Tuskira is targeting that gap with a new autonomous red teaming capability that evaluates an organization’s internet-facing attack surface and connec

A new phishing campaign is exploiting Microsoft’s device authentication process to hijack accounts, giving attackers a way to bypass traditional multifactor authentication protections. Researchers at eSentire have named the phishing kit “GhostCode.” The campaign begins when attackers submit messages through corporate website contact forms while impersonating procurement representatives from legitimate organizations. These messages are designed to establish trust and steer emp

Hundreds of agents linked to OpenAI reportedly uploaded malicious packages to RubyGems, achieved remote code execution and attempted to obtain user API keys, exposing the unpredictable risks of autonomous AI security testing. OpenAI confirmed that its agents interacted with RubyGems but described the activity as benign. RubyGems researchers offered a more troubling account, reporting that some agents attempted to conceal malicious payloads after exploiting a documentation bui

A Security has released ARENA, an open source framework designed to measure what autonomous AI agents can accomplish during offensive cybersecurity operations. Available under the MIT license, ARENA combines a security capability framework, vulnerable application generator, and evaluation system. Its goal is to help organizations compare complete AI security platforms instead of relying on model rankings or vendor-reported results. The release follows Booz Allen’s Cyber Weapo

Healthcare technology provider Veradigm has disclosed a data breach in which attackers used credentials stolen from a third-party vendor to access and copy sensitive patient information. The Chicago-based company, formerly known as Allscripts Healthcare Solutions, said the incident affected a limited number of customers and did not disrupt its operations. Veradigm supplies electronic health record, e-prescribing, patient engagement, practice management, and revenue cycle soft