GhostTree technique uses NTFS junctions to evade security scans
GhostTree leverages NTFS junctions, a file system feature that allows one directory to point to another.
General
20 articles
India temporarily blocks Telegram over exam fraud concerns
The National Testing Agency announced the restrictions on Tuesday, aiming to disrupt cheating networks that allegedly use Telegram to sell fake exam papers a...
Security researcher reportedly accesses FIFA World Cup broadcast controls via API flaw
The researcher, known as BobDaHacker, said they exploited a flaw in FIFA's back-end API by registering as a player agent.
SailPoint acquires Entro Security to enhance AI agent security
SailPoint, known for its platform that manages employee access to applications, announced the acquisition of Entro Security without disclosing financial term...
Malicious JetBrains Marketplace plugins steal AI API keys from developers
At least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers. [.
AI amplifies cyber risk in professional sports, Darktrace report finds
The Darktrace report reveals that 84% of professional sports organizations experienced at least one cyber incident in the past year, with 83% detecting the u...
Identiverse 2026: Making enterprise AI agents accountable
Amir Ofek discusses the launch of aizome's platform to make AI agents accountable.
Lawmakers leary about Trump administration’s Anthropic order
Some panned it, some said they needed more information, but caution figured into all of the responses. The post Lawmakers leary about Trump administration’s ...
TSME, ARCH, Maine, Fable, PANOS, Doug's Grandma, Vienna Sausages, Aaran Leyland - SWN #590
The Invisible Majority: Why Board Risk Reporting Misses Machine Identity Exposure
Identiverse 2026: The rise of hybrid technical roles
Saviynt's Jaime Lewis-Gross discusses what it means to be a modern sales engineer.
AI’s constant patching treadmill can be a security problem
The breakneck speed of model releases may be creating short, silent security gaps as developers must choose between performance and security, according to a ...
Board Positioning for Identity Programs: The Platform Integration Blind Spot
iRhythm Hit by Cyberattack, Patient Data Stolen and Ransom Demanded
iRhythm disclosed a cyberattack via third-party apps where patient and proprietary data was stolen, followed by a ransom demand. iRhythm Technologies is a U.
Identity as a Business Asset: Strategies for Security Leaders
Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting
A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no access to a victim's project hijack the victim's machine learning model upload an...
Your Third-Party Access Problem Is a Board-Level Liability
Why Identity Budgets Are Still Sized for the Wrong Threat
Three critical FortiSandbox bugs rated 9.8 actively exploited
Active exploitation of FortiSandbox flaws prompt urgent patching calls from security experts.