Experimental News Clipping Site

Tag: malware

  • The Register: Crypto klepto North Korea stole $659M over just 5 heists last year

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/15/north_korea_crypto_heists/ Source: The Register Title: Crypto klepto North Korea stole $659M over just 5 heists last year Feedly Summary: US, Japan, South Korea vow to intensify counter efforts North Korean blockchain bandits stole more than half a billion dollars in cryptocurrency in 2024 alone, the US, Japan, and South Korea say.… AI Summary…

  • The Register: FBI wipes Chinese PlugX malware from thousands of Windows PCs in America

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/14/fbi_french_cops_boot_chinas/ Source: The Register Title: FBI wipes Chinese PlugX malware from thousands of Windows PCs in America Feedly Summary: Hey, Xi: Zài jiàn! The FBI, working with French cops, obtained nine warrants to remotely wipe PlugX malware from thousands of Windows-based computers that had been infected by Chinese government-backed criminals, according to newly…

  • Microsoft Security Blog: Analyzing CVE-2024-44243, a macOS System Integrity Protection bypass through kernel extensions

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/01/13/analyzing-cve-2024-44243-a-macos-system-integrity-protection-bypass-through-kernel-extensions/ Source: Microsoft Security Blog Title: Analyzing CVE-2024-44243, a macOS System Integrity Protection bypass through kernel extensions Feedly Summary: Microsoft discovered a macOS vulnerability allowing attackers to bypass System Integrity Protection (SIP) by loading third party kernel extensions, which could lead to serious consequences, such as allowing attackers to install rootkits, create persistent…

  • Cloud Blog: Backscatter: Automated Configuration Extraction

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/backscatter-automated-configuration-extraction/ Source: Cloud Blog Title: Backscatter: Automated Configuration Extraction Feedly Summary: Written by: Josh Triplett Executive Summary Backscatter is a tool developed by the Mandiant FLARE team that aims to automatically extract malware configurations. It relies on static signatures and emulation to extract this information without dynamic execution, bypassing anti-analysis logic present in…

  • Hacker News: Snyk security researcher deploys malicious NPM packages targeting Cursor.com

    —

    by

    Kurt Seifried
    in

    Source URL: https://sourcecodered.com/snyk-malicious-npm-package/ Source: Hacker News Title: Snyk security researcher deploys malicious NPM packages targeting Cursor.com Feedly Summary: Comments AI Summary and Description: Yes Summary: The text describes a significant security incident involving potential dependency confusion attacks on NPM (Node Package Manager) packages. It underscores the importance of package analysis and highlights the actions taken…

  • The Register: Cryptojacking, backdoors abound as attackers abuse Aviatrix Controller bug

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/13/severe_aviatrix_controller_vulnerability/ Source: The Register Title: Cryptojacking, backdoors abound as attackers abuse Aviatrix Controller bug Feedly Summary: This is what happens when you publish PoCs immediately “Several cloud deployments" are already compromised following the disclosure of the maximum-severity vulnerability in Aviatrix Controller, researchers say.… AI Summary and Description: Yes Summary: The text discusses a…

  • The Register: Nominet probes network intrusion linked to Ivanti zero-day exploit

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/13/nominet_ivanti_zero_day/ Source: The Register Title: Nominet probes network intrusion linked to Ivanti zero-day exploit Feedly Summary: Unauthorized activity detected, but no backdoors found UK domain registrar Nominet is investigating a potential intrusion into its network related to the latest Ivanti zero-day exploits.… AI Summary and Description: Yes Summary: Nominet, the UK domain registrar,…

  • The Register: Europe coughs up €400 to punter after breaking its own GDPR data protection rules

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/13/data_broker_hacked/ Source: The Register Title: Europe coughs up €400 to punter after breaking its own GDPR data protection rules Feedly Summary: PLUS: Data broker leak reveals extent of info trading; Hot new ransomware gang might be all AI, no bark; and more Infosec in brief Gravy Analytics, a vendor of location intelligence info…

  • Hacker News: Superior Internet Privacy with Whonix

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.whonix.org/wiki/Homepage Source: Hacker News Title: Superior Internet Privacy with Whonix Feedly Summary: Comments AI Summary and Description: Yes Summary: Whonix is a privacy-focused operating system that offers robust anonymity and security features, primarily by routing internet traffic through the Tor network. Its architecture and numerous security measures provide advanced protection against various online…

  • Slashdot: New LLM Jailbreak Uses Models’ Evaluation Skills Against Them

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/01/12/2010218/new-llm-jailbreak-uses-models-evaluation-skills-against-them?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: New LLM Jailbreak Uses Models’ Evaluation Skills Against Them Feedly Summary: AI Summary and Description: Yes **Summary:** The text discusses a novel jailbreak technique for large language models (LLMs) known as the ‘Bad Likert Judge,’ which exploits the models’ evaluative capabilities to generate harmful content. Developed by Palo Alto…