Tag: Exploitation

  • The Register: Salt Typhoon’s surge extends far beyond US telcos

    Source URL: https://www.theregister.com/2024/11/27/salt_typhoons_us_telcos/ Source: The Register Title: Salt Typhoon’s surge extends far beyond US telcos Feedly Summary: Plus, a brand-new backdoor, GhostSpider, is linked to the cyber-spy crew’s operations The reach of the China-linked Salt Typhoon gang extends beyond American telecommunications giants, and its arsenal includes several backdoors, including a brand-new malware dubbed GhostSpider, according…

  • Slashdot: Hacker In Snowflake Extortions May Be a US Soldier

    Source URL: https://it.slashdot.org/story/24/11/27/1958219/hacker-in-snowflake-extortions-may-be-a-us-soldier?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Hacker In Snowflake Extortions May Be a US Soldier Feedly Summary: AI Summary and Description: Yes Summary: The text highlights a significant data breach involving the cloud storage company Snowflake, where hackers exploited weak security measures to steal sensitive data from numerous companies. The story underscores the challenges of…

  • The Register: Data broker leaves 600K+ sensitive files exposed online

    Source URL: https://www.theregister.com/2024/11/27/600k_sensitive_files_exposed/ Source: The Register Title: Data broker leaves 600K+ sensitive files exposed online Feedly Summary: Researcher spotted open database before criminals … we hope Exclusive More than 600,000 sensitive files containing thousands of people’s criminal histories, background checks, vehicle and property records were exposed to the internet in a non-password protected database belonging…

  • The Register: The workplace has become a surveillance state

    Source URL: https://www.theregister.com/2024/11/27/workplace_surveillance/ Source: The Register Title: The workplace has become a surveillance state Feedly Summary: Cracked Labs report explores the use of motion sensors and wireless networking kit to monitor offices Office buildings have become like web browsers – they’re full of tracking technology, a trend documented in a report out this week by…

  • Hacker News: The Weird BLE-Lock – Hacking Cloud Locks

    Source URL: https://nv1t.github.io/blog/the-weired-ble-lock/ Source: Hacker News Title: The Weird BLE-Lock – Hacking Cloud Locks Feedly Summary: Comments AI Summary and Description: Yes Summary: The text describes a security vulnerability found in a Bluetooth-enabled lock’s API, which allows unauthorized access to sensitive user data, including passwords and personal identifiers, through reverse-engineering techniques. This incident highlights the…

  • Hacker News: D-Link says it won’t patch 60k older modems

    Source URL: https://www.techradar.com/pro/security/d-link-says-it-wont-patch-60-000-older-modems-as-theyre-not-worth-saving Source: Hacker News Title: D-Link says it won’t patch 60k older modems Feedly Summary: Comments AI Summary and Description: Yes Summary: Security researchers have identified critical vulnerabilities in D-Link modems that have reached end-of-life status, which the company will not patch. This situation highlights the importance of maintaining infrastructure security and the…

  • Krebs on Security: Hacker in Snowflake Extortions May Be a U.S. Soldier

    Source URL: https://krebsonsecurity.com/2024/11/hacker-in-snowflake-extortions-may-be-a-u-s-soldier/ Source: Krebs on Security Title: Hacker in Snowflake Extortions May Be a U.S. Soldier Feedly Summary: Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect — a prolific hacker known as Kiberphant0m — remains…

  • Hacker News: OpenAI’s Sora Tool Leaked by Group of Aggrieved Early Testers

    Source URL: https://www.forbes.com/sites/moinroberts-islam/2024/11/26/openais-sora-tool-leaked-by-group-of-aggrieved-early-testers/ Source: Hacker News Title: OpenAI’s Sora Tool Leaked by Group of Aggrieved Early Testers Feedly Summary: Comments AI Summary and Description: Yes Summary: The unauthorized leak of OpenAI’s Sora video generation tool raises significant ethical, technological, and advocacy-related concerns surrounding innovation, labor exploitation, and corporate accountability. This incident highlights critical challenges in…

  • The Register: QNAP and Veritas dump 30-plus vulns over the weekend

    Source URL: https://www.theregister.com/2024/11/26/qnap_veritas_vulnerabilities/ Source: The Register Title: QNAP and Veritas dump 30-plus vulns over the weekend Feedly Summary: Just what you want to find when you start a new week Taiwanese NAS maker QNAP addressed 24 vulnerabilities across various products over the weekend.… AI Summary and Description: Yes Summary: QNAP has addressed 24 vulnerabilities across…

  • Simon Willison’s Weblog: Leaked system prompts from Vercel v0

    Source URL: https://simonwillison.net/2024/Nov/25/leaked-system-prompts-from-vercel-v0/#atom-everything Source: Simon Willison’s Weblog Title: Leaked system prompts from Vercel v0 Feedly Summary: Leaked system prompts from Vercel v0 v0 is Vercel’s entry in the increasingly crowded LLM-assisted development market – chat with a bot and have that bot build a full application for you. They’ve been iterating on it since launching…