Tag: proactive

  • The Register: Cisco patches two critical Identity Services Engine flaws

    Source URL: https://www.theregister.com/2025/02/05/cisco_plugs_two_critical_ise_bugs/ Source: The Register Title: Cisco patches two critical Identity Services Engine flaws Feedly Summary: One gives root access, the other lets you steal info and reconfig nodes, in the right (or should that be wrong) circumstances Cisco has fixed two critical vulnerabilities in its Identity Services Engine (ISE) that could allow an…

  • Hacker News: OCR Crypto Stealers in Google Play and App Store

    Source URL: https://securelist.com/sparkcat-stealer-in-app-store-and-google-play/115385/ Source: Hacker News Title: OCR Crypto Stealers in Google Play and App Store Feedly Summary: Comments AI Summary and Description: Yes Summary: The text describes a cybersecurity threat involving a malware campaign known as “SparkCat,” which targets Android and iOS devices by embedding malicious SDKs in popular apps to steal sensitive information,…

  • Slashdot: ‘AI Granny’ Driving Scammers Up the Wall

    Source URL: https://slashdot.org/story/25/02/05/1426220/ai-granny-driving-scammers-up-the-wall?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: ‘AI Granny’ Driving Scammers Up the Wall Feedly Summary: AI Summary and Description: Yes Summary: The deployment of O2’s AI chatbot named Daisy to engage and waste the time of scammers leverages artificial intelligence for proactive fraud prevention, showcasing a novel application of AI technology. This approach not only…

  • Alerts: CISA Adds One Known Exploited Vulnerability to Catalog

    Source URL: https://www.cisa.gov/news-events/alerts/2025/02/05/cisa-adds-one-known-exploited-vulnerability-catalog Source: Alerts Title: CISA Adds One Known Exploited Vulnerability to Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-53104 Linux Kernel Out-of-Bounds Write Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to…

  • Alerts: CISA Adds Four Known Exploited Vulnerabilities to Catalog

    Source URL: https://www.cisa.gov/news-events/alerts/2025/02/04/cisa-adds-four-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Four Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-45195 Apache OFBiz Forced Browsing Vulnerability CVE-2024-29059 Microsoft .NET Framework Information Disclosure Vulnerability CVE-2018-9276 Paessler PRTG Network Monitor OS Command Injection Vulnerability CVE-2018-19410 Paessler PRTG Network…

  • Data and computer security | The Guardian: Global ransomware payments plunge by a third amid crackdown

    Source URL: https://www.theguardian.com/technology/2025/feb/05/global-ransomware-payments-plunge-by-a-third-amid-crackdown Source: Data and computer security | The Guardian Title: Global ransomware payments plunge by a third amid crackdown Feedly Summary: Money stolen falls from record $1.25bn to $813m as more victims refuse to pay off criminal gangsRansomware payments fell by more than a third last year to $813m (£650m) as victims refused…

  • Schneier on Security: On Generative AI Security

    Source URL: https://www.schneier.com/blog/archives/2025/02/on-generative-ai-security.html Source: Schneier on Security Title: On Generative AI Security Feedly Summary: Microsoft’s AI Red Team just published “Lessons from Red Teaming 100 Generative AI Products.” Their blog post lists “three takeaways,” but the eight lessons in the report itself are more useful: Understand what the system can do and where it is…