NewsDark Reading
Walmart Takes a 'Trusted Agent' Approach to Purple Teaming
Teaser from the source
Walmart colocates red and blue teams to build trust and improve security through collaborative purple teaming exercises
This is the RSS-feed teaser. Read the full article at the original source.
Read at Dark ReadingMore on Approach
Other advisories
- MediumCVE-2026-23404apparmor: replace recursive profile removal with iterative approach
- Not ratedosv:CVE-2026-23404apparmor: replace recursive profile removal with iterative approach
- MediumCVE-2025-45582GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains a ../ symlink to a critical directory. Second, the victim must extract an archive that contains a critical file, specified via a relative pathname that begins with the symlink name and ends with that critical file's name. Here, the extraction follows the symlink and overwrites the critical file. This bypasses the protection mechanism of "Member name contains '..'" that would occur for a single TAR archive that attempted to specify the critical file via a ../ approach. For example, the first archive can contain "x -> ../../../../../home/victim/.ssh" and the second archive can contain x/authorized_keys. This can affect server applications that automatically extract any number of user-supplied TAR archives, and were relying on the blocking of traversal. This can also affect software installation processes in wh
- Not ratedsingcert:ad-2023-018Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Secure by Design Software
- Not ratedosv:MAL-2023-877Malicious code in the-subtle-art-of-not-giving-a-fck-a-counterintuitive-approach-to-living-a-good-life-by-mark-manson- (npm)
- Not ratedosv:MAL-2023-283Malicious code in dow-load-the-subtle-art-of-not-giving-a-fck-a-counterintuitive-approach-to-living-a-good-l (npm)
- HighCVE-2016-9190Arbitrary code using "crafted image file" approach affecting Pillow
- MediumCVE-2018-2859Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach: Sicherheitslücke
Other news entries
- Anthropic and OpenAI diverge on who should pull the plug on risky AINewsCSO Online
- Training AIs to Solve CAPTCHAsNewsSchneier on Security
- Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th)NewsSANS ISC Diary
- TypeSafe’s Jev ‘even more susceptible to attack’ than LLMs, says security vendorNewsCSO Online
- Is AI pentesting as good as a human pentester?NewsBleepingComputer
- Criminal IP Introduces AITEM as the Next Evolution of Attack Surface ManagementNewsBleepingComputer
- Webinar Today: Keep Pace With AI – A New Operating Model for Endpoint RemediationEventSecurityWeek
- Windows Server 2022 reaches end of mainstream support in 60 daysNewsBleepingComputer
Source: https://www.darkreading.com/cybersecurity-operations/walmart-trusted-agent-approach-purple-teaming
ID