SecurityNewLXD, MicroCloud flaw lets clients be impersonated
Canonical patched a maximum-severity LXD and MicroCloud bug that let attackers assume a trusted client's identity without its private key.
> Search
30 results for “rust”
SecurityNew
Cyber CrimeNewPolymarket breach exposes supply-chain risk
A hijacked third-party script let attackers drain 726 Polymarket wallets, prompting about $3.9 million in refunds and a review of script trust.
AI & MLAI Training Gap Tests Governance
ISACA research shows 32% of digital trust professionals say their organizations fail to address AI risks, as adoption climbs.
Cyber CrimeDNS Hijack Undercuts TLS Trust
Attackers seized three country-code domains to mint counterfeit TLS certificates for Google and other brands, Google says.
AI & MLGoogle's Gemini 4 Argon Opens Narrowly
Google's frontier model Gemini 4 Argon reaches trusted cyber defenders first, with benchmark wins mixed and pricing set to rise.
Cyber CrimeAntino Backdoor Hides C2 in Outlook, OneDrive
A China-nexus actor is using Microsoft 365 mailboxes and cloud storage as dead drops to command a Rust-compiled Windows backdoor, Talos reports.
AI & MLCan You Trust a Model You Can't Inspect?
Open-weight AI brings hidden model risks to enterprises, and the liability may land on the CSO.
SecurityAI-Discovered Flaws Skew Toward RCE
Google's threat intelligence unit reports AI-found vulnerabilities are far more likely to enable remote code execution than other disclosed flaws.
SecurityRogue MFA Provider Can Siphon Passwords
Researchers show how a compromised Entra admin account can turn a trusted external MFA provider into a credential-stealing prompt.
SecurityGoogle's PQC Roadmap Reshapes Digital Trust
Google's post-quantum cryptography roadmap accelerates a migration to 2029 and introduces Merkle Tree Certificates, pressuring traditional X.509 infrastructure.
Cyber CrimeProvenance Fails as npm Supply Chain Attack Hits
CloudSEK reports attackers abused npm trusted publishing to ship GHAPPIER loader, exposing limits of provenance attestations.
Cyber CrimeRust Developers Hit by Fake Job Call Scam
Rust team members and crate owners are being targeted by attackers who pose as recruiters to hijack credentials and push malicious packages.
Cyber CrimeJade Sleet's macOS backdoors hit IT vendor
SentinelOne tied North Korea's Jade Sleet to an India-based IT services breach that deployed two Rust macOS backdoors on a DevOps engineer's MacBook.
SecurityWhy identity dark matter hides in plain sight
The Hacker News explains how unregistered accounts and machine credentials keep IAM blind spots open across cloud estates.
Cyber CrimeAPT36 Uses GitHub Repos as Stealth C2
Zscaler ThreatLabz says Transparent Tribe is running four new tools against Indian and Afghan government targets, hiding command traffic inside private GitHub repositories.
SecurityCISA Ties Decoy Systems to Zero Trust
New CISA guidance details how decoys, lures, and honeypots can expose adversaries already operating inside critical infrastructure networks.
SecurityWindows 11 Update Breaks Domain Trust
Administrators report that the KB5124008 security update breaks domain trust on some enterprise systems, pointing to a security feature as the likely cause.
AI & MLAI rivals confirm safety talks underway
OpenAI, Anthropic and Google DeepMind have spent weeks coordinating on AI safety, OpenAI's policy chief told reporters in Washington.
Cyber CrimeGrindr's £26M Settlement and the Stakes for User Trust
Grindr agrees to pay £26m to settle U.K. claims over pre-2020 data sharing, without admitting liability.
SecurityLiquid Network's $320M Bitcoin Heist Raises Trust Questions
Hackers drain ~95% of Liquid's federation wallet, promise return if bug is fixed, testing sidechain trust.
Cyber CrimeNode.js Abuse Signals Shift in Malware Delivery
Threat actors are hijacking the trusted Node.js runtime to deliver malware, evading detection in targeted attacks since early 2026.
SecurityZero trust meets its agentic AI reckoning
Autonomous agents strain zero trust's identity limits, experts warn as adoption lags.
SecurityCustomer Trust Demands More Than Compliance Checks
Privacy controls fail at system boundaries. Engineers must design for intent propagation, data minimization, and failure.
SecurityPatch windows collapse, network defense urged
Microsoft says the time to patch vulnerabilities is shrinking, urging network-level controls to bridge the gap.
Tech NewsMeta Ray-Bans face a trust reckoning
As bans spread, wearable cameras risk going the way of Google Glass unless privacy is solved.
Cyber CrimeRust Supply Chain Attack Tied to North Korea
Wiz links a crates.io compromise to Sapphire Sleet, warning of broad developer exposure.
Tech NewsSigned Drivers Turn Into Attack Tools
This week's threats exploit trusted components: signed drivers, legitimate apps, and AI to bypass defenses.
Tech NewsCursor's Origin Aims at GitHub's Woes
AI startup Cursor, now part of SpaceX, launches Origin, a code-hosting platform that integrates with GitHub amid user frustration over outages.
TrendingVC board seats under antitrust microscope
DOJ probes a16z board roles at rival firms, alarming venture insiders.
SecurityMCP Servers: A New Secret-Leak Vector
Model Context Protocol servers can expose enterprise secrets via plaintext configs, over-permissioning, and prompt injection, often undetected.