Geek-Guy.com

Tag: environments

RSA extends passwordless authentication to Linux environments

RSA has expanded its passwordless authentication capabilities to Linux environments, advancing its goal of delivering secure, password-free access for every user in every environment. Linux is ubiquitous in enterprise infrastructure, powering servers, developer workstations, and critical operational environments across industries from financial services to government. Despite its reach, Linux users have historically been underserved by…

Companies built AI into core systems before figuring out how to govern it

70% of organizations use GenAI in live environments, and 64% have AI agents in pilot or production deployments. Some of those agents have privileged access to core systems, according to Check Point’s 2026 Cloud Security Report. Confirmed and suspected AI incidents (Source: Check Point) Production AI expands the enterprise attack surface Security architectures built around…

Canonical releases Workshop for one-command sandboxed dev environments on Ubuntu

Canonical released Workshop, a tool that launches sandboxed development environments on Ubuntu with a single command. Environments are configured once and reproduced on different machines, giving teams consistent setups across development workstations and deployment pipelines. A terminal showing the output of the workshop launch and list commands (Source: Canonical) How Workshop defines environments Workshop environments…

Automating identity lifecycle and security with AWS Directory Service APIs

Managing identities and access across complex environments has become more critical than ever. AWS Directory Service for Managed Microsoft Active Directory, also known as AWS Managed Microsoft AD, has added new capabilities to manage users and groups. Now, you can perform create, read, update, and delete (CRUD) operations on users and groups directly through AWS…

Third-Party Risk Management Needs to Evolve 

Traditional point-in-time vendor risk assessments are becoming increasingly difficult to maintain in environments where vendors, technologies, and regulatory requirements continuously evolve.  During a recent discussion with eSecurity Planet, Auditive Founder and CEO Daniel Faddoul explained why many organizations are struggling to keep pace with modern third-party risk exposure and why continuous monitoring is becoming more…

AI infrastructure is cracking under sovereignty demands

AI deployments are moving into environments with tighter controls around data, infrastructure, and system operations. Organizations are building AI systems across multiple providers, platforms, and computing environments while managing governance, security, and compliance obligations within defined boundaries. NTT DATA’s 2026 Global AI Report A Playbook for Private and Sovereign AI examined these conditions in more…

Download: Secure Foundations for AI Workloads on AWS

Center for Internet Security helps organizations deploy AI and high-performance compute environments from a trusted, hardened operating system baseline. CIS Hardened Images help teams reduce misconfiguration risk, support compliance efforts, and move faster in AWS. What are AI-optimized CIS Hardened Images CIS Hardened Images are secure, on-demand, scalable cloud images that help organizations deploy from…

SAP npm Supply Chain Attack Targets Developer Credentials 

A supply chain attack targeting SAP npm packages is putting enterprise development environments at risk.  Aikido researchers discovered malicious code designed to steal credentials and secrets from developer systems and CI/CD pipelines.  The attack “… harvests local developer credentials, GitHub and npm tokens, GitHub Actions secrets, and cloud secrets from AWS, Azure, GCP, and Kubernetes,”…

cPanel Vulnerability Exposes Servers to Takeover 

An authentication vulnerability in cPanel and Web Host Manager (WHM) is putting web hosting environments at risk, prompting the company to release an emergency patch and warn administrators to act quickly.  The flaw affects multiple authentication paths and could allow attackers to gain unauthorized access to servers if left unpatched. “Let’s call this what it…

Fedora Linux 44 ships with GNOME 50 and KDE Plasma 6.6

The Fedora Project released Fedora Linux 44, delivering updated desktop environments, revised installer behavior, and several lower-level system changes across its editions and spins. The release covers the project’s flagship editions, including Workstation, KDE Plasma Desktop, Cloud, Server, CoreOS, and IoT, alongside the Atomic Desktops lineup of Silverblue, Kinoite, Cosmic, Budgie, and Sway. Alternate spins…

Riddled with flaws, serial-to-Ethernet converters endanger critical infrastructure

Serial-to-Ethernet adapters used in industrial, retail, and healthcare environments to link serial devices to TCP/IP networks are riddled with vulnerabilities and outdated open-source components, researchers warn. The flaws enable various attacks scenarios, including taking full control of mission-critical equipment such as remote terminal units, programmable logic controllers, point-of-sale systems, and bedside patient monitors. In a…

Prompt injection tags along as GenAI enters daily government use

Routine use of GenAI has moved into daily operations in state and territorial government environments, placing new security risks within common workflows. A Center for Internet Security (CIS) report, Prompt Injections: The Inherent Threat to Generative AI, identifies prompt injection as a persistent concern tied to that adoption. Adoption expands exposure Use of AI tools…

ClickFix Meets AI: A Multi-Platform Attack Targeting macOS in the Wild

For years, macOS environments carried an aura of relative safety. Not immunity, but lower priority in the threat landscape. That perception has aged about as well as an unpatched server.  The reality in 2026 is very different. Apple devices now make up a significant share of corporate endpoints. And they sit in the hands of the people attackers most want…

ClickFix Meets AI: A Multi-Platform Attack Targeting macOS in the Wild

For years, macOS environments carried an aura of relative safety. Not immunity, but lower priority in the threat landscape. That perception has aged about as well as an unpatched server.  The reality in 2026 is very different. Apple devices now make up a significant share of corporate endpoints. And they sit in the hands of the people attackers most want…

Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations

An Iran-nexus threat actor is suspected to be behind a password-spraying campaign targeting Microsoft 365 environments in Israel and the U.A.E. amid ongoing conflict in the Middle East. The activity, assessed to be ongoing, was carried out in three distinct attack waves that took place on March 3, March 13, and March 23, 2026, per Check Point. “The campaign is…

Escaping the COTS trap

Over the years, enterprise cybersecurity environments have accumulated staggering numbers of commercial tools. Industry research converges on a consistent picture of tool proliferation that drives complexity, cost, and risk. The global cybersecurity market is valued at approximately $243 billion in 2024 and projected to surpass $520 billion annually by 2026. Commercial off-the-shelf (COTS) software promises…

Why Kubernetes controllers are the perfect backdoor

In my years securing cloud-native environments, I’ve noticed a recurring blind spot. We obsess over the “front doors” such as exposed dashboards, misconfigured RBAC, or unpatched container vulnerabilities. We harden the perimeter, but we often ignore the machinery humming inside.  Sophisticated adversaries have moved beyond simple smash-and-grab tactics. They don’t just want to run a…

SystemRescue 13 updates its kernel to Linux 6.18 LTS, adds new recovery tools

Bootable Linux recovery environments occupy a specific niche in the systems administration and incident response toolkit. SystemRescue, an Arch-based live distribution built for repairing unbootable systems and recovering data from damaged drives, has shipped version 13.00 with a new long-term supported kernel, updated storage tools, and several additions to its command-line toolset. Kernel and storage…

Vulnerabilities from years ago still opening doors for attackers

Exploitation timelines continued to compress in enterprise environments, with newly disclosed flaws reaching active use almost immediately and older weaknesses remaining active years after disclosure. (Source: Cisco Talos) Findings from Cisco Talos’ 2025 Year in Review show how attackers combined rapid weaponization with long-term exposure spanning infrastructure, identity systems, and user workflows. Top-targeted vulnerabilities show…

SolarWinds: 77% of IT Teams Lack Visibility Across Environments

Seventy-seven percent of IT teams lack full visibility across on-prem and cloud environments, according to SolarWinds’ 2026 State of Monitoring & Observability Report. The study examines how IT teams are navigating increasingly fragmented hybrid environments and how AI is reshaping modern observability. Balancing legacy and cloud IT environments SolarWinds, in partnership with UserEvidence, surveyed more…

Security hole could let hackers take over Juniper Networks PTX core routers

Network admins with Juniper PTX series routers in their environments are being warned to patch immediately, because a newly-discovered critical vulnerability could lead to an unauthenticated threat actor running code with root privileges. The hole is “especially dangerous, because these devices often sit in the middle of the network, not on the fringes,” said Piyush…

FreeBSD Jail Escape Flaw Breaks Filesystem Isolation

A critical vulnerability in FreeBSD allows attackers to escape jail environments and access the host filesystem.  The flaw weakens a core isolation mechanism and, under specific configurations, can lead to a complete breakdown of filesystem separation. This vulnerability “… enables full filesystem access for a jailed process, breaking the chroot,” said researchers in the advisory.…

CloudCasa expands Red Hat OpenShift data protection across edge and hybrid cloud

CloudCasa has announced enhancements to its backup and recovery platform designed to support Red Hat OpenShift environments across core, edge, and hybrid cloud deployments. The latest CloudCasa updates introduce SMB protocol support as a backup storage target, enabling organizations to leverage existing SMB-based storage, including deployments using an SMB operator on Red Hat OpenShift clusters,…

Asimily Expands Channel Enablement With New Partner Tier

Provider of the Next Generation Exposure Management Platform for IoT, OT, and IoMT environments, Asimily, has recently announced the next generation of its global partner strategy, introducing a new partner tier to accelerate high-performing strategic partners and expand enablement across connected ecosystems. Partner program updates include ‘In Flight’ tier The new tier will be called…

OT teams are losing the time advantage against industrial threat actors

In many industrial environments, internet-facing gateways, remote access appliances, and boundary systems sit close enough to production networks that attackers can move from IT intrusion to operational disruption with limited resistance. Dragos’ 2026 OT/ICS Year in Review describes a threat landscape where adversaries are spending more time learning how physical processes work and less time…

Microsoft equips CISOs and AI risk leaders with a new security tool

Microsoft released Security Dashboard for AI in public preview for enterprise environments. The dashboard aggregates posture and real-time risk signals from Microsoft Defender, Microsoft Entra, and Microsoft Purview into a single view within security tools. Security Dashboard for AI in browser (Source: Microsoft) “The dashboard equips CISOs and AI risk leaders with a governance tool…

Security teams are paying for sprawl in more ways than one

Most enterprises run security programs across sprawling environments that include mobile devices, SaaS applications, cloud infrastructure, and telecom networks. Spend control in these areas often sits outside the security organization, even when the operational consequences land directly on security teams. Tangoe’s 2026 Trends & Savings Recommendations Report connects these cost domains to recurring governance failures…

Video: How Netskope and Optiv Fight Shadow AI

As organizations race to modernize cloud environments and adopt AI, security and governance can’t be an afterthought. In this episode of Partner POV, Katie Bavoso sits down with Netskope and Optiv to explore how a deep partner-led approach helps customers securely adopt cloud and AI technologies at scale. Joe Green of Netskope and Paul Herrmann…

Reco Raises $30M Series B to Address AI SaaS Security Risks

Reco, a New York-based security vendor focused on AI-driven SaaS environments, has raised $30 million in Series B funding, bringing its total capital raised to $85 million.  The round was led by Zeev Ventures and included participation from existing investors Insight Partners, boldstart ventures, and Angular Ventures, along with new strategic backers Workday Ventures, TIAA…

Palantir And Cognizant Take AI Into Healthcare & More

Palantir and Cognizant are teaming up to bring AI into healthcare and other regulated enterprise environments, but the interesting part is where they’re aiming to use it.  The partnership brings together Palantir’s Foundry platform and Artificial Intelligence Platform (AIP) with Cognizant’s scale, delivery model, and longstanding presence in healthcare through its TriZetto business. Why healthcare…

Palantir And Cognizant Take AI Into Healthcare & More

Palantir and Cognizant are teaming up to bring AI into healthcare and other regulated enterprise environments, but the interesting part is where they’re aiming to use it.  The partnership brings together Palantir’s Foundry platform and Artificial Intelligence Platform (AIP) with Cognizant’s scale, delivery model, and longstanding presence in healthcare through its TriZetto business. Why healthcare…