Tag: attack

  • Alerts: CISA Adds Five Known Exploited Vulnerabilities to Catalog

    Source URL: https://www.cisa.gov/news-events/alerts/2025/03/03/cisa-adds-five-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Five Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability CVE-2022-43769 Hitachi Vantara Pentaho BA Server…

  • The Register: Governments can’t seem to stop asking for secret backdoors

    Source URL: https://www.theregister.com/2025/03/03/opinion_e2ee/ Source: The Register Title: Governments can’t seem to stop asking for secret backdoors Feedly Summary: Cut off one head and 100 grow back? Decapitation may not be the way to go Opinion With Apple pulling the plug on at-rest end-to-end encryption (E2EE) for UK users, and Signal threatening to pull out of…

  • The Register: US Cyber Command reportedly pauses cyberattacks on Russia

    Source URL: https://www.theregister.com/2025/03/03/infosec_in_brief/ Source: The Register Title: US Cyber Command reportedly pauses cyberattacks on Russia Feedly Summary: PLUS: Phishing suspects used fishing gear as alibi; Apple’s ‘Find My’ can track PCs and Androids; and more Infosec In Brief US Defense Secretary Pete Hegseth has reportedly ordered US Cyber Command to pause offensive operations against Russia,…

  • Hacker News: Kaspersky exposes hidden malware on GitHub stealing personal data

    Source URL: https://www.kaspersky.com/about/press-releases/kaspersky-exposes-hidden-malware-on-github-stealing-personal-data-and-485000-in-bitcoin Source: Hacker News Title: Kaspersky exposes hidden malware on GitHub stealing personal data Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the discovery of a malicious campaign dubbed GitVenom by Kaspersky’s Global Research & Analysis Team, targeting gamers and crypto investors through compromised open-source repositories on GitHub. It…

  • The Register: India’s top telco plans cloud PCs for its 475 million subscribers

    Source URL: https://www.theregister.com/2025/03/03/asia_tech_news_in_brief/ Source: The Register Title: India’s top telco plans cloud PCs for its 475 million subscribers Feedly Summary: PLUS: China bans AI leaders from visiting USA; Acer data leak suspect cuffed; and more Asia In Brief India’s top telco Reliance Jio , which boasts over 460 million subscribers, will soon introduce a cloud…

  • Hacker News: The GitVenom campaign: cryptocurrency theft using GitHub

    Source URL: https://securelist.com/gitvenom-campaign/115694/ Source: Hacker News Title: The GitVenom campaign: cryptocurrency theft using GitHub Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the GitVenom campaign, which involves threat actors creating fake open-source projects on GitHub to distribute malicious code. These projects appear legitimate and lure unsuspecting users, emphasizing the need for…

  • Hacker News: Certificate Transparency in Firefox: A Big Step for Web Security

    Source URL: https://blog.transparency.dev/ct-in-firefox Source: Hacker News Title: Certificate Transparency in Firefox: A Big Step for Web Security Feedly Summary: Comments AI Summary and Description: Yes Summary: The implementation of Certificate Transparency (CT) enforcement in Firefox marks a significant advancement in web security, enhancing protection against certificate fraud and man-in-the-middle attacks. This change demands compliance from…

  • Slashdot: Serbian Student’s Android Phone Compromised By Exploit From Cellebrite

    Source URL: https://it.slashdot.org/story/25/03/01/019202/serbian-students-android-phone-compromised-by-exploit-from-cellebrite?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Serbian Student’s Android Phone Compromised By Exploit From Cellebrite Feedly Summary: AI Summary and Description: Yes Summary: The report illustrates a concerning case of a zero-day exploit utilized by a surveillance vendor against a student critic of the Serbian government, highlighting the ongoing threats to information security in civil…