Experimental News Clipping Site

Tag: 2024

  • Microsoft Security Blog: Code injection attacks using publicly disclosed ASP.NET machine keys

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/02/06/code-injection-attacks-using-publicly-disclosed-asp-net-machine-keys/ Source: Microsoft Security Blog Title: Code injection attacks using publicly disclosed ASP.NET machine keys Feedly Summary: Microsoft Threat Intelligence observed limited activity by an unattributed threat actor using a publicly available, static ASP.NET machine key to inject malicious code and deliver the Godzilla post-exploitation framework. In the course of investigating, remediating, and…

  • Alerts: CISA Adds Five Known Exploited Vulnerabilities to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/02/06/cisa-adds-five-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Five Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added five vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-0411 7-Zip Mark of the Web Bypass Vulnerability CVE-2022-23748 Dante Discovery Process Control Vulnerability CVE-2024-21413 Microsoft Outlook Improper Input Validation Vulnerability CVE-2020-29574 CyberoamOS…

  • Cloud Blog: Using capa Rules for Android Malware Detection

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/capa-rules-android-malware-detection/ Source: Cloud Blog Title: Using capa Rules for Android Malware Detection Feedly Summary: Mobile devices have become the go-to for daily tasks like online banking, healthcare management, and personal photo storage, making them prime targets for malicious actors seeking to exploit valuable information. Bad actors often turn to publishing and distributing malware…

  • Hacker News: The New York Times Has Spent $10.8M in Its Legal Battle with OpenAI So Far

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.hollywoodreporter.com/business/business-news/new-york-times-legal-battle-openai-1236127637/ Source: Hacker News Title: The New York Times Has Spent $10.8M in Its Legal Battle with OpenAI So Far Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses the evolving dynamics between generative AI firms and media publishers following OpenAI’s launch of ChatGPT. It highlights different strategies adopted by…

  • Alerts: CISA Adds One Known Exploited Vulnerability to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/02/05/cisa-adds-one-known-exploited-vulnerability-catalog Source: Alerts Title: CISA Adds One Known Exploited Vulnerability to Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-53104 Linux Kernel Out-of-Bounds Write Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to…

  • The Register: Netgear fixes critical bugs as Five Eyes warn about break-ins at the edge

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/05/netgear_fixes_critical_bugs_while/ Source: The Register Title: Netgear fixes critical bugs as Five Eyes warn about break-ins at the edge Feedly Summary: International security squads all focus on stopping baddies busting in through routers, IoT kit etc Netgear is advising customers to upgrade their firmware after it patched two critical vulnerabilities affecting multiple routers.… AI…

  • Alerts: CISA Adds Four Known Exploited Vulnerabilities to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/02/04/cisa-adds-four-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Four Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-45195 Apache OFBiz Forced Browsing Vulnerability CVE-2024-29059 Microsoft .NET Framework Information Disclosure Vulnerability CVE-2018-9276 Paessler PRTG Network Monitor OS Command Injection Vulnerability CVE-2018-19410 Paessler PRTG Network…

  • Data and computer security | The Guardian: Global ransomware payments plunge by a third amid crackdown

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theguardian.com/technology/2025/feb/05/global-ransomware-payments-plunge-by-a-third-amid-crackdown Source: Data and computer security | The Guardian Title: Global ransomware payments plunge by a third amid crackdown Feedly Summary: Money stolen falls from record $1.25bn to $813m as more victims refuse to pay off criminal gangsRansomware payments fell by more than a third last year to $813m (£650m) as victims refused…

  • The Register: Microsoft quietly erases Windows 11 TPM 2.0 bypass workaround from help page

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/05/windows_11_hardware_requirement_workaround/ Source: The Register Title: Microsoft quietly erases Windows 11 TPM 2.0 bypass workaround from help page Feedly Summary: You’ll upgrade that aging piece of kit and you’ll like it For the past three years, Microsoft documented a way to run Windows 11 on PCs that lack Trusted Platform Module 2.0 hardware –…