Tag: exploit

  • The Register: China’s FamousSparrow flies back into action, breaches US org after years off the radar

    Source URL: https://www.theregister.com/2025/03/27/china_famoussparrow_back/ Source: The Register Title: China’s FamousSparrow flies back into action, breaches US org after years off the radar Feedly Summary: Crew also cooked up two fresh SparrowDoor backdoor variants, says ESET The China-aligned FamousSparrow crew has resurfaced after a long period of presumed inactivity, compromising a US financial-sector trade group and a…

  • Alerts: CISA Adds One Known Exploited Vulnerability to Catalog

    Source URL: https://www.cisa.gov/news-events/alerts/2025/03/27/cisa-adds-one-known-exploited-vulnerability-catalog Source: Alerts Title: CISA Adds One Known Exploited Vulnerability to Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant…

  • The Register: Security shop pwns ransomware gang, passes insider info to authorities

    Source URL: https://www.theregister.com/2025/03/27/security_shop_pwns_ransomware_gang/ Source: The Register Title: Security shop pwns ransomware gang, passes insider info to authorities Feedly Summary: Researchers say ‘proactive’ approach is needed to combat global cybercrime Here’s one you don’t see every day: A cybersecurity vendor is admitting to breaking into a notorious ransomware crew’s infrastructure and gathering data it relayed to…

  • Alerts: CISA Adds Two Known Exploited Vulnerabilities to Catalog

    Source URL: https://www.cisa.gov/news-events/alerts/2025/03/26/cisa-adds-two-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Two Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability These types of vulnerabilities…

  • OpenAI : Moving from intent-based bots to proactive AI agents

    Source URL: https://openai.com/index/zendesk Source: OpenAI Title: Moving from intent-based bots to proactive AI agents Feedly Summary: Moving from intent-based bots to proactive AI agents. AI Summary and Description: Yes Summary: The text references a shift from intent-based bots to proactive AI agents, which is significant in the context of AI security and generative AI security.…

  • OpenAI : Moving from intent-based bots to proactive AI agents

    Source URL: https://openai.com/index/zendesk Source: OpenAI Title: Moving from intent-based bots to proactive AI agents Feedly Summary: Moving from intent-based bots to proactive AI agents. AI Summary and Description: Yes Summary: The text references a shift from intent-based bots to proactive AI agents, which is significant in the context of AI security and generative AI security.…

  • Alerts: CISA Releases One Industrial Control Systems Advisory

    Source URL: https://www.cisa.gov/news-events/alerts/2025/03/27/cisa-releases-one-industrial-control-systems-advisory Source: Alerts Title: CISA Releases One Industrial Control Systems Advisory Feedly Summary: CISA released one Industrial Control Systems (ICS) advisory on March 27, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-037-01 Schneider Electric EcoStruxure Power Monitoring Expert (PME) (Update A) CISA encourages users and…

  • The Register: CrushFTP CEO’s feisty response to VulnCheck’s CVE for critical make-me-admin bug

    Source URL: https://www.theregister.com/2025/03/27/crushftp_cve/ Source: The Register Title: CrushFTP CEO’s feisty response to VulnCheck’s CVE for critical make-me-admin bug Feedly Summary: Screenshot shows company head unhappy, claiming ‘real CVE is pending’ CrushFTP’s CEO is not happy with VulnCheck after the CVE numbering authority (CNA) released an unofficial ID for the critical vulnerability in its file transfer…

  • Hacker News: Blasting Past WebP – An analysis of the NSO BLASTPASS iMessage exploit

    Source URL: https://googleprojectzero.blogspot.com/2025/03/blasting-past-webp.html Source: Hacker News Title: Blasting Past WebP – An analysis of the NSO BLASTPASS iMessage exploit Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text provides an in-depth analysis of the NSO Group’s zero-click exploit, known as BLASTPASS, which targets vulnerabilities in Apple’s iOS, specifically focusing on how manipulative content…