Experimental News Clipping Site

Tag: attacks

  • Hacker News: We Cracked a 512-Bit DKIM Key for Less Than $8 in the Cloud

    —

    by

    Kurt Seifried
    in

    Source URL: https://dmarcchecker.app/articles/crack-512-bit-dkim-rsa-key Source: Hacker News Title: We Cracked a 512-Bit DKIM Key for Less Than $8 in the Cloud Feedly Summary: Comments AI Summary and Description: Yes Summary: The article discusses a successful attempt to crack a 512-bit DKIM key using cloud computing resources, highlighting vulnerabilities in current email security practices. It underscores the…

  • CSA: How Can Strong IAM Prevent Data Breaches?

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/blog/2025/01/08/adapting-strong-iam-strategies-to-combat-ai-driven-cyber-threats Source: CSA Title: How Can Strong IAM Prevent Data Breaches? Feedly Summary: AI Summary and Description: Yes Summary: The text highlights significant data breaches at T-Mobile and Coinbase due to weak Identity and Access Management (IAM) controls, emphasizing the importance of a robust IAM strategy to prevent unauthorized access and data breaches.…

  • The Register: Crims backdoored the backdoors they supplied to other miscreants. Then the domains lapsed

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/08/backdoored_backdoors/ Source: The Register Title: Crims backdoored the backdoors they supplied to other miscreants. Then the domains lapsed Feedly Summary: Here’s what $20 gets you these days More than 4,000 unique backdoors are using expired domains and/or abandoned infrastructure, and many of these expose government and academia-owned hosts – thus setting these hosts…

  • Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/07/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability Users and administrators are also encouraged to…

  • Hacker News: A Day in the Life of a Prolific Voice Phishing Crew

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/01/a-day-in-the-life-of-a-prolific-voice-phishing-crew/ Source: Hacker News Title: A Day in the Life of a Prolific Voice Phishing Crew Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text delves into the disturbing and sophisticated tactics utilized by voice phishing gangs, primarily focusing on a group known as “Crypto Chameleon.” It highlights how these criminals…

  • Hacker News: How is my Browser blocking RWX execution?

    —

    by

    Kurt Seifried
    in

    Source URL: https://rwxstoned.github.io/2025-01-04-Reviewing-browser-hooks/ Source: Hacker News Title: How is my Browser blocking RWX execution? Feedly Summary: Comments AI Summary and Description: Yes Summary: The text describes a novel security feature implemented in a popular browser that functions similarly to an Endpoint Detection and Response (EDR) system. By monitoring thread creation at runtime, the browser can…

  • Krebs on Security: A Day in the Life of a Prolific Voice Phishing Crew

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/01/a-day-in-the-life-of-a-prolific-voice-phishing-crew/ Source: Krebs on Security Title: A Day in the Life of a Prolific Voice Phishing Crew Feedly Summary: Besieged by scammers seeking to phish user accounts over the telephone, Apple and Google frequently caution that they will never reach out unbidden to users this way. However, new details about the internal operations…

  • The Register: Turbulence at UN aviation agency as probe into potential data theft begins

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/07/icao_data_theft_investigation/ Source: The Register Title: Turbulence at UN aviation agency as probe into potential data theft begins Feedly Summary: Crime forum-dweller claims to have leaked 42,000 documents packed with personal info The United Nations’ aviation agency is investigating “a potential information security incident" after a cybercriminal claimed they had laid hands on 42,000…

  • Embrace The Red: AI Domination: Remote Controlling ChatGPT ZombAI Instances

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/spaiware-and-chatgpt-command-and-control-via-prompt-injection-zombai/ Source: Embrace The Red Title: AI Domination: Remote Controlling ChatGPT ZombAI Instances Feedly Summary: At Black Hat Europe I did a fun presentation titled SpAIware and More: Advanced Prompt Injection Exploits. Without diving into the details of the entire talk, the key point I was making is that prompt injection can impact…

  • The Register: Charter, Consolidated, Windstream reportedly join Salt Typhoon victim list

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/06/charter_consolidated_windstream_salt_typhoon/ Source: The Register Title: Charter, Consolidated, Windstream reportedly join Salt Typhoon victim list Feedly Summary: The slow drip of compromised telecom networks continues The list of telecommunications victims in the Salt Typhoon cyberattack continues to grow as a new report names Charter Communications, Consolidated Communications, and Windstream among those breached by Chinese…