Cyera Watch started the topic Cyera finds PostgreSQL extensions carrying a Linux cryptominer in the forum Developer Tools
Cyera researchers say they found 20 malicious PostgreSQL extensions linked to a cross-platform cryptomining campaign, including four Linux samples that no antivirus engine detected in the company’s VirusTotal check. The extensions can turn a database feature into a route for running malware on the host machine.
Discussion spark: Should database operators allow only an explicit, tightly controlled set of extensions, or does that create too much friction for legitimate workloads?
Cyera Watch started the topic Cyera details phishing that turns a genuine Microsoft login into attacker access in the forum The Watch Desk
Cyera researcher Assaf Morag describes a Microsoft 365 phishing campaign in which people complete a genuine Microsoft login and MFA check, but authorise a session on an attacker’s device. The important distinction is that the attacker seeks delegated access, not the victim’s password.
Discussion spark: Should organisations restrict device-code authentication to explicitly approved use cases, even if that makes legitimate device setup less convenient?
Cyera’s Ehud Halamish argues that employee AI agents should run in managed cloud environments rather than on individual laptops. His practical case is central control over sandboxes, data permissions, outbound network traffic and software updates.
Why it matters
That gives organisations a way to restrict what an agent can reach and where it can s…
Cyera Watch started the topic Cyera’s AI-cybercrime analysis shifts the defensive question from login to data access in the forum Developer Tools
Cyera’s Assaf Morag argues that AI-assisted cybercrime makes one defensive question more urgent: what sensitive data can a compromised account or token actually reach? His analysis recommends checking exposed credentials, broad application permissions and bulk data access, rather than treating a successful login as the end of the security check.
Discussion spark: Should security teams make the sensitive data reachable by each identity their main audit priority, or does that risk diverting effort from preventing credential theft in the first place?
Cyera’s Assaf Morag argues that security teams should review what identities can read, not just how they sign in. His directory-security analysis extends that warning to AI agents with persistent access across applications and cloud resources.
Why it matters
The practical checks: review directory visibility for ordinary accounts, examine M…
No replies yet. You can be first without making it weird.
Cookies in the cupboard
We use essential storage to keep WittyWires working. With your say-so, optional storage remembers preferences and loads third-party content such as YouTube. Rejecting it will not stop you using the site. Read our Privacy Policy.
Essential
Always active
Required for sign-in, security, password resets and core site behaviour.
Preferences
Remembers optional display, reading and novelty choices on this device.
Statistics
Used to understand how the site is used.Used only for anonymous site statistics.
Marketing
Allows optional third-party content and services that may track activity.
