Tag: linked

  • NCSC Feed: Protect your management interfaces

    Source URL: https://www.ncsc.gov.uk/blog-post/protect-your-management-interfaces Source: NCSC Feed Title: Protect your management interfaces Feedly Summary: Why it’s important to protect the interfaces used to manage your infrastructure, and some recommendations on how you might do this. AI Summary and Description: Yes Summary: The text addresses critical vulnerabilities associated with system management interfaces, highlighting the risks linked to…

  • Hacker News: Constant-time coding will soon become infeasible

    Source URL: https://eprint.iacr.org/2025/435 Source: Hacker News Title: Constant-time coding will soon become infeasible Feedly Summary: Comments AI Summary and Description: Yes Summary: This paper discusses the challenges and shortcomings associated with writing secure cryptographic software that is free from timing-based side-channels. It presents a pessimistic view on the feasibility of constant-time coding, suggesting that failures…

  • The Register: This is the FBI, open up. China’s Volt Typhoon is on your network

    Source URL: https://www.theregister.com/2025/03/12/volt_tyhoon_experience_interview_with_gm/ Source: The Register Title: This is the FBI, open up. China’s Volt Typhoon is on your network Feedly Summary: Power utility GM talks to El Reg about getting that call and what happened next Nick Lawler, general manager of the Littleton Electric Light and Water Departments (LELWD), was at home one Friday…

  • Hacker News: Gemma 3 Technical Report [pdf]

    Source URL: https://storage.googleapis.com/deepmind-media/gemma/Gemma3Report.pdf Source: Hacker News Title: Gemma 3 Technical Report [pdf] Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text provides a comprehensive technical report on Gemma 3, an advanced multimodal language model introduced by Google DeepMind. It highlights significant architectural improvements, including an increased context size, enhanced multilingual capabilities, and innovations…

  • Hacker News: The Insecurity of Telecom Stacks in the Wake of Salt Typhoon

    Source URL: https://soatok.blog/2025/03/12/on-the-insecurity-of-telecom-stacks-in-the-wake-of-salt-typhoon/ Source: Hacker News Title: The Insecurity of Telecom Stacks in the Wake of Salt Typhoon Feedly Summary: Comments AI Summary and Description: Yes Summary: The text highlights a security vulnerability discovered in FreeSWITCH, an open-source telecom software, which could allow for remote code execution due to improper handling of HTTP requests. The…

  • The Register: CISA worker says 100-strong Red Team fired after DOGE cancelled contract

    Source URL: https://www.theregister.com/2025/03/12/cisa_staff_layoffs/ Source: The Register Title: CISA worker says 100-strong Red Team fired after DOGE cancelled contract Feedly Summary: Election infosec advisory agency also shuttered A penetration tester who worked at the US govt’s CISA claims his 100-strong team was dismissed after Elon Musk’s Trump-blessed DOGE unit cancelled a contract – and that more…

  • Schneier on Security: Silk Typhoon Hackers Indicted

    Source URL: https://www.schneier.com/blog/archives/2025/03/silk-typhoon-hackers-indicted.html Source: Schneier on Security Title: Silk Typhoon Hackers Indicted Feedly Summary: Lots of interesting details in the story: The US Department of Justice on Wednesday announced the indictment of 12 Chinese individuals accused of more than a decade of hacker intrusions around the world, including eight staffers for the contractor i-Soon, two…

  • The Register: ‘Uber for nurses’ exposes 86k+ medical records, PII in open S3 bucket for months

    Source URL: https://www.theregister.com/2025/03/11/uber_for_nurses_exposes_86k/ Source: The Register Title: ‘Uber for nurses’ exposes 86k+ medical records, PII in open S3 bucket for months Feedly Summary: Non-password-protected, unencrypted 108GB database…what could possibly go wrong Exclusive More than 86,000 records containing nurses’ medical records, facial images, ID documents and more sensitive info linked to health tech company ESHYFT was…

  • Threat Research Archives – Unit 42: RustDoor and Koi Stealer for macOS Used by North Korea-Linked Threat Actor to Target the Cryptocurrency Sector

    Source URL: https://unit42.paloaltonetworks.com/macos-malware-targets-crypto-sector/ Source: Threat Research Archives – Unit 42 Title: RustDoor and Koi Stealer for macOS Used by North Korea-Linked Threat Actor to Target the Cryptocurrency Sector Feedly Summary: AI Summary and Description: Yes Summary: The text details a significant malware campaign targeting macOS systems, notably linked to North Korean nation-state actors employing advanced…