TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

GBHackers

Zero-Auth Vulnerability Enables Cross-Tenant Access at DoD Contractor

Divya · 3 hours ago · Read original ↗

ATT&CK techniques detected

1 predictions
T1525Implant Internal Image
65%
“zero - auth vulnerability enables cross - tenant access at dod contractor a severe authorization vulnerability was recently discovered in schemata, an ai - powered virtual training platform serving the united states department of defense. security researcher alex schapiro, utiliz…”

Summary

A severe authorization vulnerability was recently discovered in Schemata, an AI-powered virtual training platform serving the United States Department of Defense. Security researcher Alex Schapiro, utilizing the open-source AI hacking agent Strix, identified a critical lack of API authorization. Backed by Andreessen Horowitz, Schemata holds active government contracts to provide immersive 3D simulations for various […]

The post Zero-Auth Vulnerability Enables Cross-Tenant Access at DoD Contractor appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.