Experimental News Clipping Site

Tag: attacks

  • The Register: Microsoft blames Medusa ransomware affiliates for GoAnywhere exploits while Fortra keeps head buried

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/10/06/microsoft_blames_medusa_ransomware_affiliates/ Source: The Register Title: Microsoft blames Medusa ransomware affiliates for GoAnywhere exploits while Fortra keeps head buried Feedly Summary: You can’t find anything bad if you don’t look, right? Medusa ransomware affiliates are among those exploiting a maximum-severity bug in Fortra’s GoAnywhere managed file transfer (MFT) product, according to Microsoft Threat Intelligence.……

  • Slashdot: Are Software Registries Inherently Insecure?

    —

    by

    Kurt Seifried
    in

    Source URL: https://developers.slashdot.org/story/25/10/05/2318202/are-software-registries-inherently-insecure?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Are Software Registries Inherently Insecure? Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the persistent issues related to software supply chain attacks, emphasizing weaknesses in the design of software registries like npm, PyPI, and Docker Hub. It highlights how inadequate safeguards allowed for multiple registry breaches…

  • Slashdot: Signal Braces For Quantum Age With SPQR Encryption Upgrade

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/10/03/234236/signal-braces-for-quantum-age-with-spqr-encryption-upgrade?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Signal Braces For Quantum Age With SPQR Encryption Upgrade Feedly Summary: AI Summary and Description: Yes Summary: Signal’s introduction of the Sparse Post Quantum Ratchet (SPQR) marks a significant enhancement in encryption protocols, incorporating quantum-resistant cryptography into its messaging platform. This upgrade, called the Triple Ratchet, is designed to…

  • Simon Willison’s Weblog: Sora 2 prompt injection

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Oct/3/cameo-prompt-injections/ Source: Simon Willison’s Weblog Title: Sora 2 prompt injection Feedly Summary: It turns out Sora 2 is vulnerable to prompt injection! When you onboard to Sora you get the option to create your own “cameo" – a virtual video recreation of yourself. Here’s mine singing opera at the Royal Albert Hall. You…

  • Slashdot: Google Says Hackers Are Sending Extortion Emails To Executives

    —

    by

    Kurt Seifried
    in

    Source URL: https://tech.slashdot.org/story/25/10/02/1812256/google-says-hackers-are-sending-extortion-emails-to-executives?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Google Says Hackers Are Sending Extortion Emails To Executives Feedly Summary: AI Summary and Description: Yes Summary: Google has reported that hackers associated with the ransomware group cl0p are sending extortion emails to executives, threatening the release of stolen sensitive data from Oracle business applications. The authenticity of these…

  • Cisco Talos Blog: Family group chats: Your (very last) line of cyber defense

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/family-group-chats-your-very-last-line-of-cyber-defense/ Source: Cisco Talos Blog Title: Family group chats: Your (very last) line of cyber defense Feedly Summary: Amy gives an homage to parents in family group chats everywhere who want their children to stay safe in this wild world. AI Summary and Description: Yes Summary: This text provides insights into current cybersecurity…

  • Microsoft Security Blog: Microsoft named a Leader in the IDC MarketScape for XDR

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/10/02/microsoft-named-a-leader-in-the-idc-marketscape-for-xdr/ Source: Microsoft Security Blog Title: Microsoft named a Leader in the IDC MarketScape for XDR Feedly Summary: Microsoft has been named a Leader in IDC’s inaugural category for Worldwide Extended Detection and Response (XDR) Software for 2025, recognized for its deep integration, intelligent automation, and unified security operations solutions. The post Microsoft…

  • The Register: Subpoena tracking platform blames outage on AWS social engineering attack

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/10/02/subpoena_tracking_platform_outage_blamed/ Source: The Register Title: Subpoena tracking platform blames outage on AWS social engineering attack Feedly Summary: Software maker Kodex said its domain registrar fell for a fraudulent legal order A software platform used by law enforcement agencies and major tech companies to manage subpoenas and data requests went dark this week after…

  • Slashdot: Intel and AMD Trusted Enclaves, a Foundation For Network Security, Fall To Physical Attacks

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/10/01/229239/intel-and-amd-trusted-enclaves-a-foundation-for-network-security-fall-to-physical-attacks?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Intel and AMD Trusted Enclaves, a Foundation For Network Security, Fall To Physical Attacks Feedly Summary: AI Summary and Description: Yes Summary: Researchers have introduced two significant hardware attacks, Battering RAM and Wiretap, that compromise Intel SGX and AMD SEV-SNP trusted enclaves. These attacks exploit flaws in deterministic encryption…