Experimental News Clipping Site

Tag: exploit

  • The Register: Nearly 10 years after Data and Goliath, Bruce Schneier says: Privacy’s still screwed

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/15/interview_bruce_schneier/ Source: The Register Title: Nearly 10 years after Data and Goliath, Bruce Schneier says: Privacy’s still screwed Feedly Summary: ‘In 50 years, I think we’ll view these business practices like we view sweatshops today’ Interview It has been nearly a decade since famed cryptographer and privacy expert Bruce Schneier released the book…

  • The Register: SonicWall firewalls now under attack: Patch ASAP or risk intrusion via your SSL VPN

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/14/sonicwall_firewalls_under_attack_patch/ Source: The Register Title: SonicWall firewalls now under attack: Patch ASAP or risk intrusion via your SSL VPN Feedly Summary: Roses are red, violets are blue, CVE-2024-53704 is perfect for a ransomware crew Miscreants are actively abusing a high-severity authentication bypass bug in unpatched internet-facing SonicWall firewalls following the public release of…

  • Cisco Talos Blog: ClearML and Nvidia vulns

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/clearml-and-nvidia-vulns/ Source: Cisco Talos Blog Title: ClearML and Nvidia vulns Feedly Summary: Cisco Talos’ Vulnerability Discovery & Research team recently disclosed two vulnerabilities in ClearML and four vulnerabilities in Nvidia. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco’s third-party vulnerability disclosure policy.   For Snort…

  • Rekt: zkLend – Rekt

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.rekt.news/ Source: Rekt Title: zkLend – Rekt Feedly Summary: A rounding error exploit bled $9.57M from zkLend vaults on Starknet. After Railgun showed them the door, the attacker ignored their Valentine’s Day bounty deadline, letting the stolen funds sit idle. Same operator behind EraLend’s 2023 hack? On-chain evidence suggests yes. AI Summary and…

  • The Register: Critical PostgreSQL bug tied to zero-day attack on US Treasury

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/14/postgresql_bug_treasury/ Source: The Register Title: Critical PostgreSQL bug tied to zero-day attack on US Treasury Feedly Summary: High-complexity bug unearthed by infoseccers, as Rapid7 probes exploit further A high-severity SQL injection bug in the PostgreSQL interactive tool was exploited alongside the zero-day used to break into the US Treasury in December, researchers say.……

  • The Register: Chinese spies suspected of ‘moonlighting’ as tawdry ransomware crooks

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/14/chinese_spies_ransomware_moonlighting/ Source: The Register Title: Chinese spies suspected of ‘moonlighting’ as tawdry ransomware crooks Feedly Summary: Some employees steal sticky notes, others ‘borrow’ malicious code A crew identified as a Chinese government-backed espionage group appears to have started moonlighting as a ransomware player – further evidence that lines are blurring between nation-state cyberspies…

  • Alerts: CISA Adds One Known Exploited Vulnerability to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/02/13/cisa-adds-one-known-exploited-vulnerability-catalog Source: Alerts Title: CISA Adds One Known Exploited Vulnerability to Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.     CVE-2024-57727 SimpleHelp Path Traversal Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks…

  • The Register: More victims of China’s Salt Typhoon crew emerge: Telcos, unis hit via Cisco bugs

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/13/salt_typhoon_pwned_7_more/ Source: The Register Title: More victims of China’s Salt Typhoon crew emerge: Telcos, unis hit via Cisco bugs Feedly Summary: Networks in US and beyond compromised by Beijing’s super-snoops pulling off priv-esc attacks China’s Salt Typhoon spy crew exploited vulnerabilities in Cisco devices to compromise at least seven devices linked to global…