Enterprise Technology Records

The post argues provider native AI guardrails fail SecOps needs and outlines reasons to run enterprise guardrails such as Netskope One AI Guardrails.

CISA guidance says multiple vendor-signed UEFI applications can be abused to bypass Secure Boot and execute unverified code before the operating system loads on systems that trust the vendor’s certificate. Mitigation includes updating firmware/software and updating UEFI DBX revocations to block the affected binaries.

ZeroFox launched ZeroFox AI Analytics, adding real-time external threat visibility, plain-language querying, dashboards, and scheduled PDF/CSV reporting.

Modat mapped internet-exposed RTSP services and reported 8,074 active endpoints that returned live video without authentication in March 2026.

Compromised npm packages tied to @tanstack, @mistralai, @uipath, @squawk, and safe-action stole GitHub credentials and AWS secrets.

Casdoor’s Local File System provider lets authenticated upload users traverse paths and write arbitrary files outside $CASDOOR/files/ via /api/upload-resource.

Multiple dnsmasq vulnerabilities could enable cache poisoning, DNSSEC-related DoS, information leakage, and DHCPv6-based local root code execution.

DirtyFrag is a Linux local privilege escalation using CVE-2026-43284 and CVE-2026-43500, with module-blocking mitigation recommended.

Varonis Systems announced its Data Security Platform achieved High (Alta) certification under Spain’s Esquema Nacional de Seguridad (ENS) at the Royal Decree 311/2022 controls level. The company said the certification expands its audited security, privacy, and controls verification list for public-sector requirements, positioning the platform for compliance and data protection.

Aqua Security introduced Aqua Compass, an MCP server in runtime security workflows, and new runtime risk dashboards that recalculate monetary exposure as controls enforce.

Netskope Threat Labs reports a ClickFix campaign delivering an AppleScript macOS infostealer that harvests Keychain data and browser session cookies via forced password prompts.

CrewAI has vulnerabilities enabling RCE, arbitrary file read, and SSRF, with multiple CVEs tied to Code Interpreter and Docker fallback.

IDrive Cloud Backup Client for Windows before 7.0.0.63 contains CVE-2026-1995 allowing SYSTEM-level arbitrary executables via writable files.

Safetica's ProcessMonitorDriver.sys in endpoint client x64 has an IOCTL flaw allowing unprivileged users to terminate protected processes.

Redmi Buds 3 Pro–6 Pro contain RFCOMM flaws that can leak call data or trigger firmware crashes over Bluetooth.