Tag: evasion

  • The Register: US accuses Canadian math prodigy of $65M crypto scheme

    Source URL: https://www.theregister.com/2025/02/04/math_prodigy_crypto_scheme/ Source: The Register Title: US accuses Canadian math prodigy of $65M crypto scheme Feedly Summary: Suspect, still at large, said to back concept that ‘code is law’ New York feds today unsealed a five-count criminal indictment charging a 22-year-old Canadian math prodigy with exploiting vulnerabilities in two decentralized finance protocols, allegedly using…

  • Krebs on Security: FBI, Dutch Police Disrupt ‘Manipulaters’ Phishing Gang

    Source URL: https://krebsonsecurity.com/2025/01/fbi-dutch-police-disrupt-manipulaters-phishing-gang/ Source: Krebs on Security Title: FBI, Dutch Police Disrupt ‘Manipulaters’ Phishing Gang Feedly Summary: The FBI and authorities in The Netherlands this week seized a number of servers and domains for a hugely popular spam and malware dissemination service operating out of Pakistan. The proprietors of the service, who use the collective…

  • Unit 42: CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia

    Source URL: https://unit42.paloaltonetworks.com/?p=138128 Source: Unit 42 Title: CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia Feedly Summary: A Chinese-linked espionage campaign targeted entities in South Asia using rare techniques like DNS exfiltration, with the aim to steal sensitive data. The post CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia appeared first…

  • Hacker News: New Apple CPU side-channel attacks steals data from browsers

    Source URL: https://www.bleepingcomputer.com/news/security/new-apple-cpu-side-channel-attack-steals-data-from-browsers/ Source: Hacker News Title: New Apple CPU side-channel attacks steals data from browsers Feedly Summary: Comments AI Summary and Description: Yes Summary: A recent disclosure by security researchers reveals critical side-channel vulnerabilities in modern Apple processors, specifically regarding the FLOP and SLAP attacks. These flaws exploit speculative execution mechanisms to leak sensitive…

  • Cisco Talos Blog: New TorNet backdoor seen in widespread campaign

    Source URL: https://blog.talosintelligence.com/new-tornet-backdoor-campaign/ Source: Cisco Talos Blog Title: New TorNet backdoor seen in widespread campaign Feedly Summary: Cisco Talos discovered an ongoing malicious campaign operated by a financially motivated threat actor targeting users, predominantly in Poland and Germany. AI Summary and Description: Yes **Summary:** The text describes a sophisticated ongoing cyber campaign discovered by Cisco…

  • Schneier on Security: New VPN Backdoor

    Source URL: https://www.schneier.com/blog/archives/2025/01/new-vpn-backdoor.html Source: Schneier on Security Title: New VPN Backdoor Feedly Summary: A newly discovered VPN backdoor uses some interesting tactics to avoid detection: When threat actors use backdoor malware to gain access to a network, they want to make sure all their hard work can’t be leveraged by competing groups or detected by…

  • Cisco Talos Blog: Seasoning email threats with hidden text salting

    Source URL: https://blog.talosintelligence.com/seasoning-email-threats-with-hidden-text-salting/ Source: Cisco Talos Blog Title: Seasoning email threats with hidden text salting Feedly Summary: Hidden text salting is a simple yet effective technique for bypassing email parsers, confusing spam filters, and evading detection engines that rely on keywords. Cisco Talos observed an increase in the number of email threats leveraging hidden text…

  • Hacker News: Cryptocurrency Turns to Cash in Russian Banks

    Source URL: https://krebsonsecurity.com/2024/12/how-cryptocurrency-turns-to-cash-in-russian-banks/ Source: Hacker News Title: Cryptocurrency Turns to Cash in Russian Banks Feedly Summary: Comments AI Summary and Description: Yes Summary: The text highlights the emergence of a Canadian financial firm as a payment processor for Russian cryptocurrency exchanges, implicating it in facilitating cybercrime services targeted at Russian-speaking customers. This raises significant concerns…

  • Simon Willison’s Weblog: Lessons From Red Teaming 100 Generative AI Products

    Source URL: https://simonwillison.net/2025/Jan/18/lessons-from-red-teaming/ Source: Simon Willison’s Weblog Title: Lessons From Red Teaming 100 Generative AI Products Feedly Summary: Lessons From Red Teaming 100 Generative AI Products New paper from Microsoft describing their top eight lessons learned red teaming (deliberately seeking security vulnerabilities in) 100 different generative AI models and products over the past few years.…