Tag: exploit

Source URL: https://www.theregister.com/2025/03/06/fbi_china_pays_75k_per/ Source: The Register Title: Feds name and charge alleged Silk Typhoon spies behind years of China-on-US attacks Feedly Summary: Xi’s freelance infosec warriors apparently paid up to $75K to crack a single American inbox US government agencies announced Wednesday criminal charges against alleged members of China’s Silk Typhoon gang, plus internet domain…

Hacker News: Apple takes UK to court over ‘backdoor’ order

—

by

Source URL: https://www.theregister.com/2025/03/05/apple_reportedly_ipt_complaint/ Source: Hacker News Title: Apple takes UK to court over ‘backdoor’ order Feedly Summary: Comments AI Summary and Description: Yes Summary: Apple has lodged a legal complaint against the UK government’s order to break iCloud encryption, signaling significant implications for data privacy and security. This case raises critical concerns about the balance…

The Register: China’s Silk Typhoon, tied to US Treasury break-in, now hammers IT and govt targets

—

by

Source URL: https://www.theregister.com/2025/03/05/china_silk_typhoon_update/ Source: The Register Title: China’s Silk Typhoon, tied to US Treasury break-in, now hammers IT and govt targets Feedly Summary: They’re good at zero-day exploits, too Silk Typhoon, the Chinese government crew believed to be behind the December US Treasury intrusions, has been abusing stolen API keys and cloud credentials in ongoing…

Hacker News: Vulnerability in partner.microsoft.com allows unauthenticated access

—

by

Source URL: https://nvd.nist.gov/vuln/detail/CVE-2024-49035 Source: Hacker News Title: Vulnerability in partner.microsoft.com allows unauthenticated access Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a significant vulnerability (CVE-2024-49035) related to improper access control in Microsoft’s Partner Center, allowing unauthenticated attackers to elevate their privileges over a network. The vulnerability is classified as critical due…

The Register: Apple takes UK government to court over ‘backdoor’ order

—

by

Source URL: https://www.theregister.com/2025/03/05/apple_reportedly_ipt_complaint/ Source: The Register Title: Apple takes UK government to court over ‘backdoor’ order Feedly Summary: A first-of-its-kind legal challenge set to be heard this month, per reports Apple has reportedly filed a legal complaint with the UK’s Investigatory Powers Tribunal (IPT) contesting the UK government’s order that it must forcibly break the…

Microsoft Security Blog: Silk Typhoon targeting IT supply chain

—

by

Source URL: https://www.microsoft.com/en-us/security/blog/2025/03/05/silk-typhoon-targeting-it-supply-chain/ Source: Microsoft Security Blog Title: Silk Typhoon targeting IT supply chain Feedly Summary: Silk Typhoon is a Chinese state actor focused on espionage campaigns targeting a wide range of industries in the US and throughout the world. In recent months, Silk Typhoon has shifted to performing IT supply chain attacks to gain…

Unit 42: Beneath the Surface: Detecting and Blocking Hidden Malicious Traffic Distribution Systems

—

by

Source URL: https://unit42.paloaltonetworks.com/?p=138517 Source: Unit 42 Title: Beneath the Surface: Detecting and Blocking Hidden Malicious Traffic Distribution Systems Feedly Summary: A topological analysis and case studies add nuance to a study of malicious traffic distribution systems. We compare their use by attackers to benign systems. The post Beneath the Surface: Detecting and Blocking Hidden Malicious…

Wired: 1 Million Third-Party Android Devices Have a Secret Backdoor for Scammers

—

by

Source URL: https://www.wired.com/story/1-million-third-party-android-devices-badbox-2/ Source: Wired Title: 1 Million Third-Party Android Devices Have a Secret Backdoor for Scammers Feedly Summary: New research shows at least a million inexpensive Android devices—from TV streaming boxes to car infotainment systems—are compromised to allow bad actors to commit ad fraud and other cybercrime. AI Summary and Description: Yes Summary: The…

Hacker News: Show HN: ArchGW – An open-source intelligent proxy server for prompts

—

by