9/12 AI agents on an open-source pen-test platform hit e-commerce sites at about $5 a task. The weaknesses were old ones.
https://secblog.reedcloudsec.com/secblog-weekly-issue-008/#:~:text=Hackers%20Use%20Autonomous%20AI
SecBlogSecBlog Weekly 008: BeyondTrust, ConnectWise, eMudhra KeysA BeyondTrust zero-day, a ConnectWise credential in Microsoft 365 tenants, eight guessable CA keys, a backdoored OVHcloud CLI, and Rank Math, Docker, Ghostscript, Cairn and AdFection.
10/12 One compromised SFTP login exposed California student records for four months. The affected count is still unreported.
https://secblog.reedcloudsec.com/secblog-weekly-issue-008/#:~:text=One%20Compromised%20Login%20Exposed
SecBlogSecBlog Weekly 008: BeyondTrust, ConnectWise, eMudhra KeysA BeyondTrust zero-day, a ConnectWise credential in Microsoft 365 tenants, eight guessable CA keys, a backdoored OVHcloud CLI, and Rank Math, Docker, Ghostscript, Cairn and AdFection.
