Security Bulletin

Spring Boot exposes the endpoint "/actuator/heapdump" to collect debug information. By default, the endpoint will return a file heapdump.hprof, which includes a binary heapdump that can be used to analyze the current state of the application. Non...

Guardrails cannot serve as the primary security boundary for AI agents. Identity controls impose firmer limits.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

ASM operates as a six-stage governance chain: discover, classify, assign, route, reduce, and monitor

Defined as the practice of protecting software applications from threats throughout their lifecycle

ESAFENET's CDG showed up in our data before. The company focused on secure document management and data leakage prevention solutions. The "CDG" stands for "Content Data Guard", and the product appears to be mostly targeting the Chinese...

Three gaps separate organizations with audit readiness from organizations with audit preparation capability

Application detection and response programs fail when they collect signals but cannot investigate with them

AI application security programs collapse at three predictable control points: system prompt integrity, output handling and runtime visibility gaps

The U.S. Justice Department is prosecuting an American man for allegedly providing U.S. border authorities with a passcode that wiped the contents of his phone, a case believed to be the first of its kind in the United States where federal...

The Hacker News disclosed that the threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware families, indicating that the operators are showing no signs of stopping despite extensive public...