Tag: disclosure
-
Hacker News: The Insecurity of Telecom Stacks in the Wake of Salt Typhoon
Source URL: https://soatok.blog/2025/03/12/on-the-insecurity-of-telecom-stacks-in-the-wake-of-salt-typhoon/ Source: Hacker News Title: The Insecurity of Telecom Stacks in the Wake of Salt Typhoon Feedly Summary: Comments AI Summary and Description: Yes Summary: The text highlights a security vulnerability discovered in FreeSWITCH, an open-source telecom software, which could allow for remote code execution due to improper handling of HTTP requests. The…
-
Alerts: CISA Adds Six Known Exploited Vulnerabilities to Catalog
Source URL: https://www.cisa.gov/news-events/alerts/2025/03/11/cisa-adds-six-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Six Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-24983 Microsoft Windows Win32k Use-After-Free Vulnerability CVE-2025-24984 Microsoft Windows NTFS Information Disclosure Vulnerability CVE-2025-24985 Microsoft Windows Fast FAT File System Driver Integer…
-
Cisco Talos Blog: Microsoft Patch Tuesday for March 2025 — Snort rules and prominent vulnerabilities
Source URL: https://blog.talosintelligence.com/march-patch-tuesday-release/ Source: Cisco Talos Blog Title: Microsoft Patch Tuesday for March 2025 — Snort rules and prominent vulnerabilities Feedly Summary: Microsoft has released its monthly security update for March of 2025 which includes 57 vulnerabilities affecting a range of products, including 6 that Microsoft marked as “critical”. AI Summary and Description: Yes Summary:…
-
Hacker News: Espressif’s Response to Undocumented Commands in ESP32 Bluetooth by Tarlogic
Source URL: https://www.espressif.com/en/news/response_esp32_bluetooth Source: Hacker News Title: Espressif’s Response to Undocumented Commands in ESP32 Bluetooth by Tarlogic Feedly Summary: Comments AI Summary and Description: Yes Summary: Espressif addresses concerns regarding claims of a “backdoor” in its ESP32 chips, clarifying that the reported internal debug commands do not pose a security threat. The company emphasizes its…
-
Hacker News: ESP32 Undocumented Bluetooth Commands: Clearing the Air
Source URL: https://developer.espressif.com/blog/2025/03/esp32-bluetooth-clearing-the-air/ Source: Hacker News Title: ESP32 Undocumented Bluetooth Commands: Clearing the Air Feedly Summary: Comments AI Summary and Description: Yes Summary: The text addresses security concerns related to undocumented HCI commands in the ESP32 Bluetooth controller, dismissing claims of a backdoor while outlining the nature of these commands and their implications for security.…
-
The Register: Microsoft admits GitHub used to store malware that infected almost a million devices
Source URL: https://www.theregister.com/2025/03/10/infosec_in_brief/ Source: The Register Title: Microsoft admits GitHub used to store malware that infected almost a million devices Feedly Summary: Also, phone cleaner apps are a data-sucking scam, Singapore considering the literal rod for scammers, and more Infosec in Brief Microsoft has spotted a malvertising campaign that downloaded nastyware hosted on GitHub and…