AI isn’t just moving fast. It’s creating new attack paths. Cyber teams must now manage vulnerabilities – and their ramifications throughout their IT environments – in AI tools deployed without enough governance guardrails. The answer for securing this new attack surface? Unified exposure management.Key takeawaysAI as an attack vector: By ... Read More

Sha1-Hulud malware is an aggressive npm supply-chain attack compromising CI/CD and developer environments. This blog addresses frequently asked questions and advises cloud security teams to immediately audit for at least 800 compromised packages.A massive resurgence of the Sha1-Hulud malware family, self-titled by the attackers as "The Second Coming," was observed ... Read More

Find out how to detect which OpenSSL version you’re running and if your organization is exposed to the critical OpenSSL vulnerability - and what to do about it. The post What You Should Know about the New OpenSSL Vulnerability appeared first on Ermetic ... Read More