Experimental News Clipping Site

Tag: exploit

  • The Register: Shell to pay: Crims invade your PC with CastleRAT malware, now in C and Python

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/05/clickfix_castlerat_malware/ Source: The Register Title: Shell to pay: Crims invade your PC with CastleRAT malware, now in C and Python Feedly Summary: Pro tip, don’t install PowerShell commands without approval A team of data thieves has doubled down by developing its CastleRAT malware in both Python and C variants. Both versions spread by…

  • The Register: Critical, make-me-super-user SAP S/4HANA bug under active exploitation

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/05/critical_sap_s4hana_bug_exploited/ Source: The Register Title: Critical, make-me-super-user SAP S/4HANA bug under active exploitation Feedly Summary: 9.9-rated flaw on the loose, so patch now A critical code-injection bug in SAP S/4HANA that allows low-privileged attackers to take over your SAP system is being actively exploited, according to security researchers.… AI Summary and Description: Yes…

  • OpenAI : GPT-5 bio bug bounty call

    —

    by

    Kurt Seifried
    in

    Source URL: https://openai.com/gpt-5-bio-bug-bounty Source: OpenAI Title: GPT-5 bio bug bounty call Feedly Summary: OpenAI invites researchers to its Bio Bug Bounty. Test GPT-5’s safety with a universal jailbreak prompt and win up to $25,000. AI Summary and Description: Yes Summary: OpenAI’s initiative invites researchers to participate in its Bio Bug Bounty program, focusing on testing…

  • Slashdot: Warner Bros. Discovery Sues Midjourney For Copyright Infringement

    —

    by

    Kurt Seifried
    in

    Source URL: https://yro.slashdot.org/story/25/09/04/2236226/warner-bros-discovery-sues-midjourney-for-copyright-infringement Source: Slashdot Title: Warner Bros. Discovery Sues Midjourney For Copyright Infringement Feedly Summary: AI Summary and Description: Yes Summary: Warner Bros. Discovery has raised significant legal concerns by filing a copyright lawsuit against Midjourney, alleging that the AI image generator is unlawfully using its intellectual property to create images of iconic characters.…

  • The Register: Attackers snooping around Sitecore, dropping malware via public sample keys

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/04/unknown_miscreants_snooping_around_sitecore/ Source: The Register Title: Attackers snooping around Sitecore, dropping malware via public sample keys Feedly Summary: You cut and pasted the machine key from the official documentation? Ouch Unknown miscreants are exploiting a configuration vulnerability in multiple Sitecore products to achieve remote code execution via a publicly exposed key and deploy snooping…

  • The Register: Boffins build automated Android bug hunting system

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/04/boffins_build_automated_android_bug_hunting/ Source: The Register Title: Boffins build automated Android bug hunting system Feedly Summary: AI agent system said to have found more than 100 zero-day flaws in production apps AI models get slammed for producing sloppy bug reports and burdening open source maintainers with hallucinated issues, but they also have the potential to…

  • Cisco Talos Blog: From summer camp to grind season

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/from-summer-camp-to-grind-season/ Source: Cisco Talos Blog Title: From summer camp to grind season Feedly Summary: Bill takes thoughtful look at the transition from summer camp to grind season, explores the importance of mental health and reflects on AI psychiatry. AI Summary and Description: Yes Summary: This text discusses the ongoing evolution of threats related…

  • The Cloudflare Blog: Addressing the unauthorized issuance of multiple TLS certificates for 1.1.1.1

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.cloudflare.com/unauthorized-issuance-of-certificates-for-1-1-1-1/ Source: The Cloudflare Blog Title: Addressing the unauthorized issuance of multiple TLS certificates for 1.1.1.1 Feedly Summary: Unauthorized TLS certificates were issued for 1.1.1.1 by a Certification Authority without permission from Cloudflare. These rogue certificates have now been revoked. AI Summary and Description: Yes Summary: The text describes a serious incident involving…

  • The Register: US puts $10M bounty on three Russians accused of attacking critical infrastructure

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/04/us_10m_bounty_fsb_attackers/ Source: The Register Title: US puts $10M bounty on three Russians accused of attacking critical infrastructure Feedly Summary: Seven-year-old Cisco vuln that remains inexplicably unpatched is their way in The US State Department has put a $10 million bounty on the heads of three Russians accused of being intelligence agents hacking America’s…