Experimental News Clipping Site

Tag: patches

  • Slashdot: Chrome To Patch Decades-Old ‘Browser History Sniffing’ Flaw That Let Sites Peek At Your History

    —

    by

    Kurt Seifried
    in

    Source URL: https://yro.slashdot.org/story/25/04/12/2054251/chrome-to-patch-decades-old-browser-history-sniffing-flaw-that-let-sites-peek-at-your-history?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Chrome To Patch Decades-Old ‘Browser History Sniffing’ Flaw That Let Sites Peek At Your History Feedly Summary: AI Summary and Description: Yes Summary: The article discusses a significant update in the Chrome browser that aims to mitigate a long-standing privacy attack known as “browser history sniffing.” This side-channel attack…

  • Krebs on Security: Patch Tuesday, April 2025 Edition

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/04/patch-tuesday-april-2025-edition/ Source: Krebs on Security Title: Patch Tuesday, April 2025 Edition Feedly Summary: Microsoft today released updates to plug at least 121 security holes in its Windows operating systems and software, including one vulnerability that is already being exploited in the wild. Eleven of those flaws earned Microsoft’s most-dire “critical" rating, meaning malware…

  • The Register: Suspected Chinese spies right now hijacking buggy Ivanti gear – for third time in 3 years

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/04/03/suspected_chines_snoops_hijacked_buggy/ Source: The Register Title: Suspected Chinese spies right now hijacking buggy Ivanti gear – for third time in 3 years Feedly Summary: Simple denial-of-service blunder turned out to be a remote unauth code exec disaster Suspected Chinese government spies have been exploiting a newly disclosed critical bug in Ivanti VPN appliances since…

  • Cloud Blog: Suspected China-Nexus Threat Actor Actively Exploiting Critical Ivanti Connect Secure Vulnerability (CVE-2025-22457)

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-exploiting-critical-ivanti-vulnerability/ Source: Cloud Blog Title: Suspected China-Nexus Threat Actor Actively Exploiting Critical Ivanti Connect Secure Vulnerability (CVE-2025-22457) Feedly Summary: Written by: John Wolfram, Michael Edie, Jacob Thompson, Matt Lin, Josh Murchie On Thursday, April 3, 2025, Ivanti disclosed a critical security vulnerability, CVE-2025-22457, impacting Ivanti Connect Secure (“ICS”) VPN appliances version 22.7R2.5 and…

  • Microsoft Security Blog: Analyzing open-source bootloaders: Finding vulnerabilities faster with AI

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/03/31/analyzing-open-source-bootloaders-finding-vulnerabilities-faster-with-ai/ Source: Microsoft Security Blog Title: Analyzing open-source bootloaders: Finding vulnerabilities faster with AI Feedly Summary: Using Microsoft Security Copilot to expedite the discovery process, Microsoft has uncovered several vulnerabilities in multiple open-source bootloaders impacting all operating systems relying on Unified Extensible Firmware Interface (UEFI) Secure Boot. Through a series of prompts, we…

  • The Register: Oracle Health reportedly warns of info leak from legacy server

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/03/30/infosec_news_in_brief/ Source: The Register Title: Oracle Health reportedly warns of info leak from legacy server Feedly Summary: PLUS: OpenAI bumps bug bounties bigtime; INTERPOL arrests 300 alleged cyber-scammers; And more! Infosec in brief Oracle Health appears to have fallen victim to an info stealing attack that has led to patient data stored by…

  • Slashdot: New Ubuntu Linux Security Bypasses Require Manual Mitigations

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/03/29/0555241/new-ubuntu-linux-security-bypasses-require-manual-mitigations?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: New Ubuntu Linux Security Bypasses Require Manual Mitigations Feedly Summary: AI Summary and Description: Yes Summary: The text discusses significant security bypasses discovered in Ubuntu Linux that could allow local attackers to exploit kernel vulnerabilities. With the involvement of cloud security researchers from Qualys, it highlights the limitations in…