The Cybersecurity and Infrastructure Security Agency has updated its Known Exploited Vulnerabilities catalog to include critical flaws in Sitecore, the Linux Kernel, and TP-Link devices. The latest additions signal growing concern over actively exploited threats in popular software and hardware platforms. As part of the update, CISA flags Linux kernel vulnerabilities as a priority for […]
AI-driven threat validation is reshaping cloud security by reducing unnecessary alerts and streamlining responses. By incorporating AI Threat Tools Cutnaturally, organizations can cut through Cloud-Native Application Protection Platform (CNAPP) noise and zero in on the most critical risks. This targeted approach allows security teams to act faster and with greater precision. Cloud-native environments, while agile, […]
Hackers breached the systems of Salesloft and Drift after compromising GitHub repositories and stealing OAuth tokens, according to a report detailing the Salesloft Drift breach. The attackers gained unauthorized access by targeting developer credentials, enabling them to exploit the companies’ integration tools. The incident involved the abuse of OAuth tokens issued to third-party applications connected […]