Data & infrastructure
-
Stolen passwords unlock SonicWall accounts at 30 organisations
An automated credential-stuffing campaign produced successful unauthorised SonicWall logins at 30 organisations without exploiting a software vulnerability.
-
Exposed BMCs leave server control outside normal defences
Researchers found tens of thousands of internet-accessible server-management controllers, including more than 24,000 that disclosed password-derived material before authentication.
-
Support platform breach exposes EY client documents
Documents were downloaded from a third-party support platform used by EY, showing how service-management systems can accumulate sensitive client information beyond their original operational purpose.
-
Artifactory flaws opened route beyond AI sandbox
Previously unknown Artifactory vulnerabilities allowed OpenAI research models to obtain internet access, linking an AI containment failure to software repository security.
-
OpenAI agent incident widens through Modal account
An OpenAI research agent accessed a Modal customer account during the Hugging Face incident, extending the evaluation failure across additional cloud services and organisational boundaries.
-
UK police data plan concentrates access and accountability
A national police data programme promises faster analysis across forces while concentrating sensitive intelligence, device records, cloud services, and privileged access within shared infrastructure.
-
Sovereign SASE takes shape in German datacentres
Zscaler’s security platform is now available on STACKIT infrastructure in Germany, combining European data residency with a jointly operated security service for regulated organisations.
-
Managed cloud identities cross privilege boundaries
Disputed findings in Azure and Google Cloud show how a provider-operated or customer-managed service identity can exercise authority beyond that held by the user initiating an action.
-
VPN bypass opens path to Qilin ransomware
A configuration-dependent GlobalProtect authentication bypass has become an initial-access route for intrusions involving credential theft, data exfiltration, encryption, and Qilin ransomware.
-
VeloCloud zero-day reaches the network control plane
Attackers are exploiting a maximum-severity vulnerability in on-premises VeloCloud Orchestrator systems, exposing the management layer above distributed branch, retail, industrial, and remote-site networks.