Tag: exploits

—

by

Source URL: https://www.theregister.com/2025/09/11/voidproxy_phishing_service/ Source: The Register Title: Hijacker helper VoidProxy boosts Google, Microsoft accounts on demand Feedly Summary: Okta uncovers new phishing-as-a-service operation with ‘multiple entities’ falling victim Multiple attackers using a new phishing service dubbed VoidProxy to target organizations’ Microsoft and Google accounts have successfully stolen users’ credentials, multi-factor authentication codes, and session tokens…

The Register: Spectre haunts CPUs again: VMSCAPE vulnerability leaks cloud secrets

—

by

Source URL: https://www.theregister.com/2025/09/11/vmscape_spectre_vulnerability/ Source: The Register Title: Spectre haunts CPUs again: VMSCAPE vulnerability leaks cloud secrets Feedly Summary: AMD Zen hardware and Intel Coffee Lake affected If you thought the world was done with side-channel CPU attacks, think again. ETH Zurich has identified yet another Spectre-based transient execution vulnerability that affects AMD Zen CPUs and…

The Register: Senator blasts Microsoft for ‘dangerous, insecure software’ that helped pwn US hospitals

—

by

Source URL: https://www.theregister.com/2025/09/11/wyden_microsoft_insecure/ Source: The Register Title: Senator blasts Microsoft for ‘dangerous, insecure software’ that helped pwn US hospitals Feedly Summary: Ron Wyden urges FTC to probe failure to secure Windows after attackers used Kerberoasting to cripple Ascension Microsoft is back in the firing line after US Senator Ron Wyden accused Redmond of shipping “dangerous,…

Cisco Security Blog: SnortML: Cisco’s ML-Based Detection Engine Gets Powerful Upgrade

—

by

Source URL: https://blogs.cisco.com/security/snortml-cisco-ml-based-detection-engine-gets-powerful-upgrade Source: Cisco Security Blog Title: SnortML: Cisco’s ML-Based Detection Engine Gets Powerful Upgrade Feedly Summary: SnortML, Cisco’s innovative ML engine for Snort IPS, proactively detects evolving exploits like SQL Injection, Command Injection & XSS on-device for privacy. AI Summary and Description: Yes Summary: The text highlights the introduction of SnortML, a machine…

Slashdot: Boffins Build Automated Android Bug Hunting System

Sep 5, 2025

—

by

Source URL: https://it.slashdot.org/story/25/09/05/196218/boffins-build-automated-android-bug-hunting-system?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Boffins Build Automated Android Bug Hunting System Feedly Summary: AI Summary and Description: Yes Summary: The text discusses an innovative AI-powered bug-hunting agent called A2, developed by researchers from Nanjing University and the University of Sydney. This agent aims to enhance vulnerability discovery in Android apps, achieving significantly higher…

The Register: Crims claim HexStrike AI penetration tool makes quick work of Citrix bugs

Sep 3, 2025

—

by

Source URL: https://www.theregister.com/2025/09/03/hexstrike_ai_citrix_exploits/ Source: The Register Title: Crims claim HexStrike AI penetration tool makes quick work of Citrix bugs Feedly Summary: LLMs and 0-days – what could possibly go wrong? Attackers on underground forums claimed they were using HexStrike AI, an open-source red-teaming tool, against Citrix NetScaler vulnerabilities within hours of disclosure, according to Check…

Unit 42: Threat Brief: Salesloft Drift Integration Used To Compromise Salesforce Instances

Sep 2, 2025

—

by

Source URL: https://unit42.paloaltonetworks.com/threat-brief-compromised-salesforce-instances/ Source: Unit 42 Title: Threat Brief: Salesloft Drift Integration Used To Compromise Salesforce Instances Feedly Summary: This Threat Brief discusses observations on a campaign leveraging Salesloft Drift integration to exfiltrate data via compromised OAuth credentials. The post Threat Brief: Salesloft Drift Integration Used To Compromise Salesforce Instances appeared first on Unit 42.…

Microsoft Security Blog: Storm-0501’s evolving techniques lead to cloud-based ransomware

Aug 27, 2025

—

by

Source URL: https://www.microsoft.com/en-us/security/blog/2025/08/27/storm-0501s-evolving-techniques-lead-to-cloud-based-ransomware/ Source: Microsoft Security Blog Title: Storm-0501’s evolving techniques lead to cloud-based ransomware Feedly Summary: Financially motivated threat actor Storm-0501 has continuously evolved their campaigns to achieve sharpened focus on cloud-based tactics, techniques, and procedures (TTPs). While the threat actor has been known for targeting hybrid cloud environments, their primary objective has shifted…

Schneier on Security: We Are Still Unable to Secure LLMs from Malicious Inputs

Aug 27, 2025

—

by