Experimental News Clipping Site

Tag: critical vulnerability

  • The Register: Critical Wazuh bug exploited in growing Mirai botnet infection

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/06/10/critical_wazuh_bug_exploited_in/ Source: The Register Title: Critical Wazuh bug exploited in growing Mirai botnet infection Feedly Summary: The open-source XDR/SIEM provider’s servers are in other botnets’ crosshairs too Cybercriminals are trying to spread multiple Mirai variants by exploiting a critical Wazuh vulnerability, researchers say – the first reported active attacks since the code execution…

  • The Register: IBM Cloud login breaks for second time this week and Big Blue isn’t saying why

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/06/05/ibm_cloud_outage_critical_vulnerability/ Source: The Register Title: IBM Cloud login breaks for second time this week and Big Blue isn’t saying why Feedly Summary: To make matters worse, IBM’s security software has a critical vuln caused by exposed password IBM isn’t having its best week after the company experienced another cloudy outage and a critical-rated…

  • The Register: Play ransomware crims exploit SimpleHelp flaw in double-extortion schemes

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/06/04/play_ransomware_infects_900_victims/ Source: The Register Title: Play ransomware crims exploit SimpleHelp flaw in double-extortion schemes Feedly Summary: Recompiled binaries and phone threats used to boost the pressure Groups linked with the Play ransomware have exploited more than 900 organizations, the FBI said Wednesday, and have developed a number of new techniques in their double-extortion…

  • Slashdot: The Hottest New Vibe Coding Startup May Be a Sitting Duck For Hackers

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/05/30/1810246/the-hottest-new-vibe-coding-startup-may-be-a-sitting-duck-for-hackers?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: The Hottest New Vibe Coding Startup May Be a Sitting Duck For Hackers Feedly Summary: AI Summary and Description: Yes Summary: The text highlights a significant security oversight by the Swedish startup Lovable, which failed to resolve a vulnerability for months that exposed sensitive user data. The case demonstrates…

  • Anchore: False Positives and False Negatives in Vulnerability Scanning: Lessons from the Trenches

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/false-positives-and-false-negatives-in-vulnerability-scanning/ Source: Anchore Title: False Positives and False Negatives in Vulnerability Scanning: Lessons from the Trenches Feedly Summary: When Good Scanners Flag Bad Results Imagine this: Friday afternoon, your deployment pipeline runs smoothly, tests pass, and you’re ready to push that new release to production. Then suddenly: BEEP BEEP BEEP – your vulnerability…

  • Slashdot: AI-Generated Code Creates Major Security Risk Through ‘Package Hallucinations’

    —

    by

    Kurt Seifried
    in

    Source URL: https://developers.slashdot.org/story/25/04/29/1837239/ai-generated-code-creates-major-security-risk-through-package-hallucinations?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: AI-Generated Code Creates Major Security Risk Through ‘Package Hallucinations’ Feedly Summary: AI Summary and Description: Yes Summary: The study highlights a critical vulnerability in AI-generated code, where a significant percentage of generated packages reference non-existent libraries, posing substantial risks for supply-chain attacks. This phenomenon is more prevalent in open…

  • The Register: Emergency patch for potential SAP zero-day that could grant full system control

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/04/25/sap_netweaver_patch/ Source: The Register Title: Emergency patch for potential SAP zero-day that could grant full system control Feedly Summary: German software giant paywalls details, but experts piece together the clues SAP’s latest out-of-band patch is for a perfect 10/10 bug in NetWeaver that experts suspect could have already been exploited as a zero-day.……

  • Krebs on Security: China-based SMS Phishing Triad Pivots to Banks

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/04/china-based-sms-phishing-triad-pivots-to-banks/ Source: Krebs on Security Title: China-based SMS Phishing Triad Pivots to Banks Feedly Summary: China-based purveyors of SMS phishing kits are enjoying remarkable success converting phished payment card data into mobile wallets from Apple and Google. Until recently, the so-called “Smishing Triad” mainly impersonated toll road operators and shipping companies. But experts…