Tag: breach

Source URL: https://it.slashdot.org/story/24/11/21/2043251/fintech-giant-finastra-investigating-data-breach Source: Slashdot Title: Fintech Giant Finastra Investigating Data Breach Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a significant security incident involving Finastra, a fintech firm that supports major banks. The report highlights the alleged theft of over 400 gigabytes of sensitive data from their internal file transfer platform,…

Krebs on Security: Feds Charge Five Men in ‘Scattered Spider’ Roundup

—

by

Source URL: https://krebsonsecurity.com/2024/11/feds-charge-five-men-in-scattered-spider-roundup/ Source: Krebs on Security Title: Feds Charge Five Men in ‘Scattered Spider’ Roundup Feedly Summary: Federal prosecutors in Los Angeles this week unsealed criminal charges against five men alleged to be members of a hacking group responsible for dozens of cyber intrusions at major U.S. technology companies between 2021 and 2023, including…

Hacker News: Listen to the whispers: web timing attacks that work

—

by

Source URL: https://portswigger.net/research/listen-to-the-whispers-web-timing-attacks-that-actually-work Source: Hacker News Title: Listen to the whispers: web timing attacks that work Feedly Summary: Comments AI Summary and Description: Yes **Summary:** This text introduces novel web timing attack techniques capable of breaching server security by exposing hidden vulnerabilities, misconfigurations, and attack surfaces more effectively than previous methods. It emphasizes the practical…

The Register: ‘Alarming’ bugs lay low in Ubuntu Server utility for 10 years

—

by

Source URL: https://www.theregister.com/2024/11/21/qualys_ubuntu_server_vulnerabilities/ Source: The Register Title: ‘Alarming’ bugs lay low in Ubuntu Server utility for 10 years Feedly Summary: Update now: Qualys says vulnerabilities give root and are ‘easily exploitable’ Researchers at Qualys refuse to release exploit code for five bugs in Ubuntu Server’s needrestart utility that allow unprivileged attackers to gain root access…

Cisco Security Blog: Cisco Secure Workload: Leading in Segmentation Maturity

—

by

Source URL: https://feedpress.me/link/23535/16893107/cisco-secure-workload-leading-in-segmentation-maturity Source: Cisco Security Blog Title: Cisco Secure Workload: Leading in Segmentation Maturity Feedly Summary: As cyber threats evolve, defending workloads in today’s multi-cloud environments requires more than traditional security. Attackers are no longer simply at the perimeter; they may already be inside, waiting to exploit vulnerabilities. This reality demands a shift from…

Wired: China’s Surveillance State Is Selling Citizen Data as a Side Hustle

—

by

Source URL: https://www.wired.com/story/chineses-surveillance-state-is-selling-citizens-data-as-a-side-hustle/ Source: Wired Title: China’s Surveillance State Is Selling Citizen Data as a Side Hustle Feedly Summary: Chinese black market operators are openly recruiting government agency insiders, paying them for access to surveillance data and then reselling it online—no questions asked. AI Summary and Description: Yes Summary: The text discusses the alarming phenomenon…

Simon Willison’s Weblog: How some of the world’s most brilliant computer scientists got password policies so wrong

—

by

Source URL: https://simonwillison.net/2024/Nov/21/password-policies/#atom-everything Source: Simon Willison’s Weblog Title: How some of the world’s most brilliant computer scientists got password policies so wrong Feedly Summary: How some of the world’s most brilliant computer scientists got password policies so wrong Stuart Schechter blames Robert Morris and Ken Thompson for the dire state of passwords today: The story…

The Register: Chinese cyberspies, Musk’s Beijing ties, labelled ‘real risk’ to US security by senator

Nov 20, 2024

—

by

Source URL: https://www.theregister.com/2024/11/20/musk_chinese_cyberspies/ Source: The Register Title: Chinese cyberspies, Musk’s Beijing ties, labelled ‘real risk’ to US security by senator Feedly Summary: Meet Liminal Panda, which prowls telecom networks in South Asia and Africa A senior US senator has warned that American tech companies’ activities in China represent a national security risk, in a hearing…

Slashdot: D-Link Tells Users To Trash Old VPN Routers Over Bug Too Dangerous To Identify

Nov 20, 2024

—

by