MITRE Caldera RCE vulnerability with public PoC fixed, patch ASAP! (CVE-2025–27364)

Users of the MITRE Caldera cyber security platform have been urged to plug a critical hole (CVE-2025–27364) that may allow unauthenticated attackers to achieve remote code execution. About MITRE Caldera MITRE Caldera is a platform built on the MITRE AT… Continue reading MITRE Caldera RCE vulnerability with public PoC fixed, patch ASAP! (CVE-2025–27364)

Offensive AI Startup Dreadnode Secures $14M to Stress-Test AI Systems

Dreadnode is building “offensive machine learning” tools to safely simulate how AI models might be exploited in the wild.
The post Offensive AI Startup Dreadnode Secures $14M to Stress-Test AI Systems appeared first on SecurityWeek.
Continue reading Offensive AI Startup Dreadnode Secures $14M to Stress-Test AI Systems

How red teaming helps safeguard the infrastructure behind AI models

Artificial intelligence (AI) is now squarely on the frontlines of information security. However, as is often the case when the pace of technological innovation is very rapid, security often ends up being a secondary consideration. This is increasingly evident from the ad-hoc nature of many implementations, where organizations lack a clear strategy for responsible AI […]

The post How red teaming helps safeguard the infrastructure behind AI models appeared first on Security Intelligence.

Continue reading How red teaming helps safeguard the infrastructure behind AI models

Stress-testing multimodal AI applications is a new frontier for red teams

Human communication is multimodal. We receive information in many different ways, allowing our brains to see the world from various angles and turn these different “modes” of information into a consolidated picture of reality. We’ve now reached the point where artificial intelligence (AI) can do the same, at least to a degree. Much like our […]

The post Stress-testing multimodal AI applications is a new frontier for red teams appeared first on Security Intelligence.

Continue reading Stress-testing multimodal AI applications is a new frontier for red teams

Testing the limits of generative AI: How red teaming exposes vulnerabilities in AI models

With generative artificial intelligence (gen AI) on the frontlines of information security, red teams play an essential role in identifying vulnerabilities that others can overlook. With the average cost of a data breach reaching an all-time high of $4.88 million in 2024, businesses need to know exactly where their vulnerabilities lie. Given the remarkable pace […]

The post Testing the limits of generative AI: How red teaming exposes vulnerabilities in AI models appeared first on Security Intelligence.

Continue reading Testing the limits of generative AI: How red teaming exposes vulnerabilities in AI models

New cybersecurity advisory highlights defense-in-depth strategies

In 2023, the Cybersecurity and Infrastructure Security Agency (CISA) conducted a red team operation against an FCEB (Federal Civilian Executive Branch) organization. In July 2024, CISA released a new CSA that detailed the findings of this assessment along with key findings relevant to the security of the organization’s network. One of the interesting findings of […]

The post New cybersecurity advisory highlights defense-in-depth strategies appeared first on Security Intelligence.

Continue reading New cybersecurity advisory highlights defense-in-depth strategies

EchoStrike: Generate undetectable reverse shells, perform process injection

EchoStrike is an open-source tool designed to generate undetectable reverse shells and execute process injection on Windows systems. “EchoStrike allows you to generate binaries that, when executed, create an undetectable RevShell, which can be th… Continue reading EchoStrike: Generate undetectable reverse shells, perform process injection