تُرجمت هذه الصفحة وتم التحقق منها آليًا. النسخة الإنجليزية هي المرجع. بعض الأجزاء لا تزال بالإنجليزية ريثما يتم التحقق من ترجمتها. عرض بالإنجليزية · الإبلاغ عن خطأ في الترجمة
Breach Watch
مكتوبة لقرارات المخاطر، لا للعناوين.
معلومات عن الاختراقات وبرامج الفدية والثغرات والتنبيهات الاستشارية والتهديدات، يصنّفها نظام استخبارات التهديدات التابع لأحد الرعاة المؤسسين، ويُحلَّل كل بند منها في موجز من ADTP.
Showing 20 of 3,237
BREACH WATCH BRIEF
Webinar Exposes Hidden Certificate Sprawl That Threatens Machine‑Identity Trust
Optiv’s live webinar revealed that many organizations lack visibility into internal, device, cloud‑workload, and code‑signing certificates, creating outage and supply‑chain risks. The session provides a repeatable discovery‑automate‑govern framework that maps directly to control‑assurance objectives for audit readiness.
BREACH WATCH BRIEF
Vercel Rolls Out Device‑Bound Session Credentials (DBSC) to Thwart Session‑Cookie Replay Attacks
Vercel announced DBSC, a device‑bound session mechanism that makes stolen session cookies unusable on other devices. The change helps SaaS platforms and developers protect credential replay, a frequent bypass of MFA. It demonstrates a concrete control for credential access management.
BREACH WATCH BRIEF
Apple to Scan Public iCloud Links for Harmful Content Starting with iOS 27.3
Apple will begin scanning iCloud files shared via “Anyone with the link” for policy‑violating content, potentially disabling accounts. This raises privacy and encryption control concerns for any organization that uses public iCloud links.
BREACH WATCH BRIEF
Veeam Software Appliance VMs Fail to Boot on AMD EPYC Hosts Due to FIPS‑Mode Jitterentropy Check
Veeam disclosed that its Software Appliance VMs can panic and refuse to boot on certain AMD EPYC processors because a FIPS‑mode jitterentropy test fails during early boot. The issue affects version 13.1+, prompting redeployment or manual update controls. It underscores the importance of configuration‑management evidence for audit readiness.
BREACH WATCH BRIEF
Insignary Launches Free Insignary‑Chk Scanner to Spot PHP2Shell and Node2Shell Webshell Exposure
Insignary announced a free, open‑source tool (Insignary‑Chk) that scans for hidden PHP2Shell and Node2Shell webshells on PHP and Node.js servers. The utility helps organizations locate malicious back‑doors before attackers can pivot, supporting continuous monitoring and audit‑ready evidence of unauthorized code.
BREACH WATCH BRIEF
US Agencies Warn Attackers Target Industrial Refrigeration Controllers, Threatening Food and Medicine Supply Chains
US federal agencies report that threat actors are exploiting unpatched industrial refrigeration controllers, risking temperature‑sensitive food and medicine. The issue highlights the need for secure configuration and remote‑access controls to satisfy audit evidence across multiple frameworks.
BREACH WATCH BRIEF
UK Government Warns AI Threats to National Critical Infrastructure
The UK Labour government issued an advisory that AI technologies pose grave risks to energy, water, transport and telecom critical infrastructure. The warning underscores the need for AI governance controls that map to multiple compliance frameworks, a key trust‑and‑control assurance signal.
BREACH WATCH BRIEF
FBI and CISA Warn of Active Cyberattacks on Industrial Refrigeration Controllers
The FBI and CISA have issued a joint advisory that threat actors are exploiting unpatched, internet‑exposed refrigeration controllers, causing temperature spikes and equipment damage in supermarkets, hospitals, and food‑processing sites. The incident underscores the importance of strong OT access and configuration controls for audit readiness.
BREACH WATCH BRIEF
EU Commission Accuses TikTok of Algorithmic ‘Rabbit Hole’ Harm, Citing DSA Violations
The European Commission says TikTok’s recommendation engine pushes users into repeated streams of content about sadness, self‑harm and body image, potentially breaching the Digital Services Act. The allegation underscores the need for robust AI‑governance controls and documented risk‑mitigation evidence for audit readiness.
BREACH WATCH BRIEF
Federal Advisory Warns Critical Infrastructure Operators of Remote Attacks on Cooling Systems
U.S. agencies warned that unpatched, internet‑exposed refrigeration controllers have been remotely hijacked, causing temperature spikes in European supermarkets and French blood banks. The advisory highlights the need for strong authentication and patch management—key control‑assurance measures for OT environments.
BREACH WATCH BRIEF
Apple to Scan Public iCloud Links Starting with iOS 27.3
Apple will begin automatically checking any iCloud content shared via “Anyone with the Link” for harmful material. The move affects enterprises that rely on public iCloud links and underscores the need for documented data‑handling controls and audit evidence.
BREACH WATCH BRIEF
Microsoft Launches Initiative to Reduce On‑Premises Security Risk
We’re announcing a new on-premises security initiative, bringing together guidance, migration, and product investments. The post New investments to reduce on-premises security risk appeared first on Microsoft Security Blog .
BREACH WATCH BRIEF
Microsoft adds AI‑agent hardening, default least‑privilege, and expanded exposure management
Microsoft Security’s November 2026 updates strengthen AI agent security, least privilege, threat protection, and exposure management. The post What’s new in Microsoft Security: November 2026 appeared first on Microsoft Security Blog .
BREACH WATCH BRIEF
Vercel Introduces Device‑Bound Session Credentials to Neutralize Session‑Hijacking, Launches AI Code‑Security Review Beta
Vercel rolled out Device‑Bound Session Credentials (DBSC) that bind login sessions to a device’s hardware key, rendering stolen session cookies ineffective, and launched a public‑beta AI‑driven security review that scans code on each GitHub push. This strengthens authentication controls and offers continuous code‑security assurance for developers.
BREACH WATCH BRIEF
Exposure Management Platforms May Miss Critical Context, Leaving Gaps in Asset Risk Visibility
A new advisory shows that many exposure management platforms fail to capture essential asset ownership and business impact data, allowing critical findings to slip through. This highlights the need for robust asset‑inventory controls to satisfy audit‑ready evidence across frameworks.
BREACH WATCH BRIEF
CISA Advises Hardening of Industrial Refrigeration and Cold‑Chain Monitoring Systems Amid Global Threat Activity
CISA, FBI, HHS, USDA and DoT warn that malicious actors are targeting industrial refrigeration and cold‑chain monitoring controllers, potentially altering temperature settings and causing inventory loss. The advisory underscores the need for strong authentication, patching, and removal of unnecessary remote access—critical for audit readiness and control assurance.
BREACH WATCH BRIEF
CISA, NSA, and ASD Issue Advisory on Vendor Post‑Quantum Cryptography Readiness
CISA, the Australian Cyber Security Centre, and the NSA released joint guidance with a quick‑reference list of questions to assess vendor readiness for post‑quantum cryptography. The advisory highlights the need for early vendor engagement to protect cryptographic assets as quantum computers become a realistic threat, a concern that maps to third‑party risk oversight in audit frameworks.
BREACH WATCH BRIEF
Google Adds Credential‑Management and Sandbox Controls to CodeMender AI Agent
Google Cloud introduced sandboxed exploit simulation, vault‑backed credential management, and JWT‑based identity for its CodeMender AI vulnerability‑remediation tool. The changes reinforce access‑control objectives and give enterprises concrete evidence for audit readiness.
BREACH WATCH BRIEF
GhostMap Android Vulnerability Enables Persistent Boot Loop Without Permissions
Bitdefender discovered a library‑level flaw in Android that lets a permission‑less app force a continuous boot loop, effectively bricking devices. The issue underscores the importance of rigorous vulnerability‑identification and remediation processes for audit readiness.
BREACH WATCH BRIEF
Apple to Scan Publicly Shared iCloud Links for Harmful Content
Apple will begin scanning any iCloud content shared via public links for illegal or harmful material, using on‑device ML and hash‑matching. The change affects cloud storage providers and underscores the need for privacy‑focused controls and audit evidence.
Breach Watch intelligence is provided by a founding sponsor of the Association. Every ADTP brief carries the sponsor's analysis and links the original source.
إحاطات الممارسين
بقلم الجمعية: ما تعنيه المعلومات الاستخبارية لهذا الأسبوع بالنسبة إلى الضوابط التي تديرها.
قراءة إخطار المورد بخرق البيانات بحثًا عما لا يقوله
قائمة تحقق للممارسين لتحويل إخطار من مورد إلى طلب أدلة وتغيير في المراقبة.
أين تتعثر جهود جرد الذكاء الاصطناعي، والضابط الذي يزيل العقبات أمامها
نتائج من حلقات نقاش الممارسين حول برامج حوكمة الذكاء الاصطناعي في عامها الأول.
إعادة استخدام الأدلة بين العناية الواجبة للعملاء والتدقيق
كيف ينظم الممارسون قاعدة أدلة واحدة تخدم المشترين والمدققين في الوقت نفسه.
إشارات Global Privacy Control والتزامات إلغاء الاشتراك على مستوى الولايات
ما يجب على الموقع فعله عندما يتلقى إشارة GPC، وكيف يُثبت ذلك بالأدلة.
احصل على الملخص
لا تُشترط العضوية. أكّد عبر البريد الإلكتروني؛ وألغِ الاشتراك بنقرة واحدة.