vetted SecOps

[vetted SecOps @VettedSecOps]

CISA Malcolm Flaws Allow Remote Code Execution and Denial of Service — CISA Malcolm network traffic analysis suites prior to version…

https://t.co/OVtC3qiD9d
#Cybersecurity #SecOps #VulnerabilityManagement

[vetted SecOps @VettedSecOps]

Defending Siemens S7 PLCs Against AI-Assisted S7comm Exploitation — CISA and partner agencies warn of active threat actors leveraging AI-generated Python scripts…

https://t.co/UIozcfIR2v
#Cybersecurity #SecOps #VulnerabilityManagement

[vetted SecOps @VettedSecOps]

CISA Adds Zimbra OS Command Injection CVE-2026-73570 to KEV Catalog — CISA has added CVE-2026-73570, an OS command injection vulnerability in…

https://t.co/yVZcBM5aNo
#Cybersecurity #SecOps #VulnerabilityManagement

[vetted SecOps @VettedSecOps]

CISA Adds TrueConf Server Vulnerabilities to KEV Catalog — CISA has added CVE-2026-72529 and CVE-2026-72530 affecting TrueConf Server to its Known…

https://t.co/k1xOHKgqbp
#Cybersecurity #SecOps #VulnerabilityManagement

[vetted SecOps @VettedSecOps]

Propagate User Authorization Context in Amazon Bedrock AgentCore — Learn how to enforce least-privilege data access in generative AI agents…

https://t.co/9ccbJ6CDTh
#Cybersecurity #SecOps #VulnerabilityManagement

[vetted SecOps @VettedSecOps]

UAT-10147 Deploys Cross-Platform SPECTRE Implant and Kernel Rootkit — Threat actor UAT-10147 is deploying SPECTRE, a cross-platform backdoor featuring…

https://t.co/cZBAP2TOAw
#Cybersecurity #SecOps #VulnerabilityManagement

[vetted SecOps @VettedSecOps]

Remediating Over-Permissioned Amazon S3 Access in Multi-Account AWS Environments — Broad S3 policies and misconfigured ACLs introduce unintended data…

https://t.co/r0iBz8LlKD
#Cybersecurity #SecOps #VulnerabilityManagement

[vetted SecOps @VettedSecOps]

macOS ClickFix Campaign Uses Fingerprinting Gates to Hide Infostealers — Microsoft Threat Intelligence discovered a macOS ClickFix campaign that evolved from open…

https://t.co/fNsD7CS16V
#Cybersecurity #SecOps #ThreatIntelligence

[vetted SecOps @VettedSecOps]

Cloudflare One Adds Detection and Policy Controls for MCP Traffic — Cloudflare One introduces protocol-level detection and Gateway policies to identify shadow…

https://t.co/15N5i58B2A
#Cybersecurity #SecOps #ThreatIntelligence

[vetted SecOps @VettedSecOps]

Dissecting the JWR Phishing Framework: Real-Time Operator Steered Attacks — Cisco Talos uncovered the JWR phishing framework, a likely…

https://t.co/gInaPbqjc6
#Cybersecurity #SecOps #VulnerabilityManagement

[vetted SecOps @VettedSecOps]

AWS ACM email validation retirement: an outage-prevention runbook — A practical control plan for finding email-validated ACM public certificates, assigning ownership,…

https://t.co/a4ZSUOzg5j
#Cybersecurity #SecOps #CloudSecurity

[vetted SecOps @VettedSecOps]

AWS IAM role manager: the least-privilege work starts after creation — IAM Role Manager removes setup friction, but generated roles still need ownership, usage…

https://t.co/zs1xaFec0v
#Cybersecurity #SecOps #CloudSecurity

[vetted SecOps @VettedSecOps]

DeadLock Ransomware Analysis: Decentralized Infrastructure and Rust Encryptor — DeadLock ransomware combines Curve25519/XChaCha20 encryption…

https://t.co/QIe2S7W9go
#Cybersecurity #SecOps #VulnerabilityManagement

[vetted SecOps @VettedSecOps]

Gunra Ransomware Defense: Mitigating FortiOS Exploits and System Intrusions — CISA and partner agencies issued advisory AA26-222A detailing Gunra…

https://t.co/a8ceuk7D0x
#Cybersecurity #SecOps #VulnerabilityManagement

[vetted SecOps @VettedSecOps]

Siemens ROX II Zero-Day Exploit Chain: Root Compromise Analysis and Defense — Siemens has released advisories SSA-078743, SSA-081142, and SSA-973901 for…

https://t.co/S3Cm9QDrWk
#Cybersecurity #SecOps #VulnerabilityManagement

[vetted SecOps @VettedSecOps]

Progress LoadMaster CVE-2026-8037 Added to CISA KEV Catalog — CISA has added CVE-2026-8037, a Progress LoadMaster command injection vulnerability, to its…

https://t.co/2vY0Ed48uj
#Cybersecurity #SecOps #VulnerabilityManagement

[vetted SecOps @VettedSecOps]

Cisco IMC Argument Injection Vulnerabilities Grant Root Privileges — Cisco has disclosed two high-severity argument injection vulnerabilities in…

https://t.co/mcQYyI2Omm
#Cybersecurity #SecOps #VulnerabilityManagement

[vetted SecOps @VettedSecOps]

Cisco IOS XE Hardening Release Fixes Critical CVSS 9.8 Vulnerabilities — Cisco released security hardening updates for Cisco IOS XE Software…

https://t.co/wINdNzaBmb
#Cybersecurity #SecOps #VulnerabilityManagement

[vetted SecOps @VettedSecOps]

AI Token Jacking Defense: Preventing API Key Theft and Transfer Station Abuse — Unit 42 research reveals cybercriminals are stealing AI API tokens via infostealers,…

https://t.co/uZLDTNiOWl
#Cybersecurity #SecOps #VulnerabilityManagement

[vetted SecOps @VettedSecOps]

ChainDrop npm Worm: Mitigating Self-Propagating Supply Chain Attacks — Microsoft Threat Intelligence identified ChainDrop, a self-propagating npm worm targeting…

https://t.co/iLTqhIf5SZ
#Cybersecurity #SecOps #VulnerabilityManagement