When AI agents become admins: Rethinking privileged access in the age of AI
From resetting passwords and approving workflows to pulling HR data and orchestrating cloud infrastructure, AI agents now perform tasks that previously required a human with privileged access. AI...
Read Blog
Is autofill safe? Clickjacking risks and security tradeoffs explained
When new security research hits the headlines, it often sparks a predictable wave of worry: should we turn off features we rely on? Should we rethink basic workflows? That’s exactly the case with...
Read Blog
Defeating Microsoft EPM in the Race to Admin: a Tale of a LPE vulnerability
Introduction Not too long ago I read an interesting blogpost by SpecterOps about Microsoft EPM that got my attention as I was not aware of this Microsoft product/feature. It was interesting to...
Read Blog
‘Plague’ malware exploits Pluggable Authentication Module to breach Linux systems
Understanding the ‘Plague’ Pluggable Authentication Module (PAM*) backdoor in Linux systems ‘Plague’ represents a newly identified Linux backdoor that has quietly evaded detection by traditional...
Read Blog
In code we trust: How to create and enforce trust of custom code at scale
In today’s threat landscape, the software supply chain has become a prime target for attackers. From injecting malicious code into legitimate applications to exploiting elevated privileges on...
Read Blog