Experimental News Clipping Site

Tag: attacks

  • Alerts: CISA Adds Two Known Exploited Vulnerabilities to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/02/25/cisa-adds-two-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Two Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability CVE-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Users and administrators are also encouraged…

  • The Register: China’s Silver Fox spoofs medical imaging apps to hijack patients’ computers

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/25/silver_fox_medical_app_backdoor/ Source: The Register Title: China’s Silver Fox spoofs medical imaging apps to hijack patients’ computers Feedly Summary: Sly like a PRC cyberattack A Chinese government-backed group is spoofing legitimate medical software to hijack hospital patients’ computers, infecting them with backdoors, credential-swiping keyloggers, and cryptominers.… AI Summary and Description: Yes Summary: The text…

  • CSA: Global ICS Exposures: State of the Internet Report

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/articles/global-ics-exposures-what-our-state-of-the-internet-report-reveals-about-critical-infrastructure-security Source: CSA Title: Global ICS Exposures: State of the Internet Report Feedly Summary: AI Summary and Description: Yes Summary: The text discusses critical vulnerabilities within Industrial Control Systems (ICS), particularly focusing on the exposure of Human-Machine Interfaces (HMIs) that pose significant security risks. With many HMIs lacking robust security measures and connected…

  • The Register: Malware variants that target operational tech systems are very rare – but 2 were found last year

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/25/new_ics_malware_dragos/ Source: The Register Title: Malware variants that target operational tech systems are very rare – but 2 were found last year Feedly Summary: Fuxnet and FrostyGoop were both used in the Russia-Ukraine war Two new malware variants specifically designed to disrupt critical industrial processes were set loose on operational technology networks last…

  • The Register: Southern Water takes the fifth over alleged $750K Black Basta ransom offer

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/25/southern_water_black_basta_leak/ Source: The Register Title: Southern Water takes the fifth over alleged $750K Black Basta ransom offer Feedly Summary: Leaked chats and spilled secrets as AI helps decode circa 200K private talks Southern Water neither confirms nor denies offering Black Basta a $750,000 ransom payment following its ransomware attack in 2024.… AI Summary…

  • The Register: How nice that state-of-the-art LLMs reveal their reasoning … for miscreants to exploit

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/25/chain_of_thought_jailbreaking/ Source: The Register Title: How nice that state-of-the-art LLMs reveal their reasoning … for miscreants to exploit Feedly Summary: Blueprints shared for jail-breaking models that expose their chain-of-thought process Analysis AI models like OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking can mimic human reasoning through a process called chain of thought.……

  • Unit 42: Auto-Color: An Emerging and Evasive Linux Backdoor

    —

    by

    Kurt Seifried
    in

    Source URL: https://unit42.paloaltonetworks.com/?p=138356 Source: Unit 42 Title: Auto-Color: An Emerging and Evasive Linux Backdoor Feedly Summary: The new Linux malware named Auto-color uses advanced evasion tactics. Discovered by Unit 42, this article cover its installation, evasion features and more. The post Auto-Color: An Emerging and Evasive Linux Backdoor appeared first on Unit 42. AI Summary…

  • Alerts: CISA Adds Two Known Exploited Vulnerabilities to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/02/24/cisa-adds-two-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Two Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2017-3066 Adobe ColdFusion Deserialization Vulnerability CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability These types of vulnerabilities are frequent attack vectors for malicious…