Experimental News Clipping Site

Tag: Exploitation

  • Hacker News: Listen to the whispers: web timing attacks that work

    —

    by

    system automation
    in

    Source URL: https://portswigger.net/research/listen-to-the-whispers-web-timing-attacks-that-actually-work Source: Hacker News Title: Listen to the whispers: web timing attacks that work Feedly Summary: Comments AI Summary and Description: Yes **Summary:** This text introduces novel web timing attack techniques capable of breaching server security by exposing hidden vulnerabilities, misconfigurations, and attack surfaces more effectively than previous methods. It emphasizes the practical…

  • Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/21/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability…

  • Hacker News: Child safety org launches AI model trained on real child sex abuse images

    —

    by

    system automation
    in

    Source URL: https://arstechnica.com/tech-policy/2024/11/ai-trained-on-real-child-sex-abuse-images-to-detect-new-csam/ Source: Hacker News Title: Child safety org launches AI model trained on real child sex abuse images Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the development of a cutting-edge AI model by Thorn and Hive aimed at improving the detection of unknown child sexual abuse materials (CSAM).…

  • Wired: China’s Surveillance State Is Selling Citizen Data as a Side Hustle

    —

    by

    system automation
    in

    Source URL: https://www.wired.com/story/chineses-surveillance-state-is-selling-citizens-data-as-a-side-hustle/ Source: Wired Title: China’s Surveillance State Is Selling Citizen Data as a Side Hustle Feedly Summary: Chinese black market operators are openly recruiting government agency insiders, paying them for access to surveillance data and then reselling it online—no questions asked. AI Summary and Description: Yes Summary: The text discusses the alarming phenomenon…

  • The Register: Now Online Safety Act is law, UK has ‘priorities’ – but still won’t explain ‘spy clause’

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/21/online_safety_act/ Source: The Register Title: Now Online Safety Act is law, UK has ‘priorities’ – but still won’t explain ‘spy clause’ Feedly Summary: Draft doc struggles to describe how theoretically encryption-busting powers might be used The UK government has set out plans detailing how it will use the new law it has created…

  • Simon Willison’s Weblog: A warning about tiktoken, BPE, and OpenAI models

    —

    by

    system automation
    in

    Source URL: https://simonwillison.net/2024/Nov/21/a-warning-about-tiktoken/#atom-everything Source: Simon Willison’s Weblog Title: A warning about tiktoken, BPE, and OpenAI models Feedly Summary: A warning about tiktoken, BPE, and OpenAI models Tom MacWright warns that OpenAI’s tiktoken Python library has a surprising performance profile: it’s superlinear with the length of input, meaning someone could potentially denial-of-service you by sending you…

  • Slashdot: Ubuntu Linux Impacted By Decade-Old ‘needrestart’ Flaw That Gives Root

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/24/11/21/0057206/ubuntu-linux-impacted-by-decade-old-needrestart-flaw-that-gives-root?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Ubuntu Linux Impacted By Decade-Old ‘needrestart’ Flaw That Gives Root Feedly Summary: AI Summary and Description: Yes Summary: The text details five local privilege escalation vulnerabilities found in the Linux utility “needrestart,” crucial for professionals in security and compliance to recognize, as they highlight significant risks associated with resource…

  • The Register: Chinese cyberspies, Musk’s Beijing ties, labelled ‘real risk’ to US security by senator

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/20/musk_chinese_cyberspies/ Source: The Register Title: Chinese cyberspies, Musk’s Beijing ties, labelled ‘real risk’ to US security by senator Feedly Summary: Meet Liminal Panda, which prowls telecom networks in South Asia and Africa A senior US senator has warned that American tech companies’ activities in China represent a national security risk, in a hearing…

  • Slashdot: D-Link Tells Users To Trash Old VPN Routers Over Bug Too Dangerous To Identify

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/24/11/20/189224/d-link-tells-users-to-trash-old-vpn-routers-over-bug-too-dangerous-to-identify?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: D-Link Tells Users To Trash Old VPN Routers Over Bug Too Dangerous To Identify Feedly Summary: AI Summary and Description: Yes Summary: D-Link has advised users of older VPN routers to replace their devices due to a serious remote code execution vulnerability. This issue exemplifies the critical security risks…

  • Alerts: Apple Releases Security Updates for Multiple Products

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/20/apple-releases-security-updates-multiple-products Source: Alerts Title: Apple Releases Security Updates for Multiple Products Feedly Summary: Apple released security updates to address vulnerabilities in multiple Apple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply…