PrivEsc – INDIA NEWS

AI-as-a-Service Providers Vulnerable to PrivEsc and Cross-Tenant Attacks

admin8 months ago08 mins

[ad_1] Apr 05, 2024NewsroomArtificial Intelligence / Supply Chain Attack New research has found that artificial intelligence (AI)-as-a-service providers such as Hugging Face are susceptible to two critical risks that could allow threat actors to escalate privileges, gain cross-tenant access to other customers’ models, and even take over the continuous integration and continuous deployment (CI/CD) pipelines….

New CherryLoader Malware Mimics CherryTree to Deploy PrivEsc Exploits

admin10 months ago04 mins

[ad_1] Jan 25, 2024NewsroomThreat Intelligence / Malware Research A new Go-based malware loader called CherryLoader has been discovered by threat hunters in the wild to deliver additional payloads onto compromised hosts for follow-on exploitation. Arctic Wolf Labs, which discovered the new attack tool in two recent intrusions, said the loader’s icon and name masquerades as…