Tag: high severity
-
The Register: Secure chat darling Matrix admits pair of ‘high severity’ protocol flaws need painful fixes
Source URL: https://www.theregister.com/2025/08/13/secure_chat_darling_matrix_admits/ Source: The Register Title: Secure chat darling Matrix admits pair of ‘high severity’ protocol flaws need painful fixes Feedly Summary: Foundation warns federated servers face biggest risk, but single-instance users can take their time The maintainers of the federated secure chat protocol Matrix are warning users of a pair of “high severity…
-
Embrace The Red: Claude Code: Data Exfiltration with DNS Requests
Source URL: https://embracethered.com/blog/posts/2025/claude-code-exfiltration-via-dns-requests/ Source: Embrace The Red Title: Claude Code: Data Exfiltration with DNS Requests Feedly Summary: Today we cover Claude Code and a high severity vulnerability that Anthropic fixed in early June. The vulnerability allowed an attacker to hijack Claude Code via indirect prompt injection and leak sensitive information from the developer’s machine, e.g.…
-
Anchore: From War Room to Workflow: How Anchore Transforms CVE Incident Response
Source URL: https://anchore.com/blog/from-war-room-to-workflow-how-anchore-transforms-cve-incident-response/ Source: Anchore Title: From War Room to Workflow: How Anchore Transforms CVE Incident Response Feedly Summary: When CVE-2025-1974 (#IngressNightmare) was disclosed, incident response teams had hours—at most—before exploits appeared in the wild. Imagine two companies responding: Which camp would you rather be in when the next critical CVE drops? Most of us…
-
The Register: FCC stands up Council on National Security to fight China in ways that CISA used to
Source URL: https://www.theregister.com/2025/03/16/infosec_news_in_brief/ Source: The Register Title: FCC stands up Council on National Security to fight China in ways that CISA used to Feedly Summary: PLUS: Alleged Garantex admin arrested in India; Google deletes more North Korean malware Infosec In Brief United States Federal Communications Commission chair Brendan Carr has unveiled plans to form a…
-
Schneier on Security: TP-Link Router Botnet
Source URL: https://www.schneier.com/blog/archives/2025/03/tp-link-router-botnet.html Source: Schneier on Security Title: TP-Link Router Botnet Feedly Summary: There is a new botnet that is infecting TP-Link routers: The botnet can lead to command injection which then makes remote code execution (RCE) possible so that the malware can spread itself across the internet automatically. This high severity security flaw (tracked…