Tag: protocol

Source URL: https://www.theregister.com/2025/03/18/microsoft_trend_flaw/ Source: The Register Title: Microsoft isn’t fixing 8-year-old shortcut exploit abused for spying Feedly Summary: ‘Only’ a local access bug but important part of N Korea, Russia, and China attack picture An exploitation avenue found by Trend Micro has been used in an eight-year-long spying campaign, but there’s no sign of a…

Hacker News: Password reuse is rampant: nearly half of observed user logins are compromised

Mar 18, 2025

—

by

Source URL: https://blog.cloudflare.com/password-reuse-rampant-half-user-logins-compromised/ Source: Hacker News Title: Password reuse is rampant: nearly half of observed user logins are compromised Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the pervasive issue of password reuse and its significant impact on online security, particularly regarding content management systems like WordPress. It highlights alarming statistics…

The Register: Court filing: DOGE aide broke Treasury policy by emailing unencrypted database

—

by

Source URL: https://www.theregister.com/2025/03/17/doge_treasury/ Source: The Register Title: Court filing: DOGE aide broke Treasury policy by emailing unencrypted database Feedly Summary: More light shed on what went down with Marko Elez, thanks to NY AG and co’s lawsuit A now-former DOGE aide violated US Treasury policy by emailing an unencrypted database containing people’s private information to…

Microsoft Security Blog: StilachiRAT analysis: From system reconnaissance to cryptocurrency theft

—

by

Source URL: https://www.microsoft.com/en-us/security/blog/2025/03/17/stilachirat-analysis-from-system-reconnaissance-to-cryptocurrency-theft/ Source: Microsoft Security Blog Title: StilachiRAT analysis: From system reconnaissance to cryptocurrency theft Feedly Summary: Microsoft Incident Response uncovered a novel remote access trojan (RAT) named StilachiRAT, which demonstrates sophisticated techniques to evade detection, persist in the target environment, and exfiltrate sensitive data. This blog primarily focuses on analysis of the WWStartupCtrl64.dll…

Schneier on Security: Improvements in Brute Force Attacks

—

by

Source URL: https://www.schneier.com/blog/archives/2025/03/improvements-in-brute-force-attacks.html Source: Schneier on Security Title: Improvements in Brute Force Attacks Feedly Summary: New paper: “GPU Assisted Brute Force Cryptanalysis of GPRS, GSM, RFID, and TETRA: Brute Force Cryptanalysis of KASUMI, SPECK, and TEA3.” Abstract: Key lengths in symmetric cryptography are determined with respect to the brute force attacks with current technology. While…

Bulletins: Vulnerability Summary for the Week of March 10, 2025

—

by

Source URL: https://www.cisa.gov/news-events/bulletins/sb25-076 Source: Bulletins Title: Vulnerability Summary for the Week of March 10, 2025 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 1E–1E Client Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged…

Cloud Blog: BitM Up! Session Stealing in Seconds Using the Browser-in-the-Middle Technique

—

by

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/session-stealing-browser-in-the-middle/ Source: Cloud Blog Title: BitM Up! Session Stealing in Seconds Using the Browser-in-the-Middle Technique Feedly Summary: Written by: Truman Brown, Emily Astranova, Steven Karschnia, Jacob Paullus, Nick McClendon, Chris Higgins Executive Summary The Rise of Browser in the Middle (BitM): BitM attacks offer a streamlined approach, allowing attackers to quickly compromise sessions…

Hacker News: Akira ransomware can be cracked with sixteen RTX 4090 GPUs in around ten hours

—

by

Source URL: https://www.tomshardware.com/tech-industry/cyber-security/akira-ransomware-cracked-with-rtx-4090-new-exploit-to-brute-force-encryption-attack Source: Hacker News Title: Akira ransomware can be cracked with sixteen RTX 4090 GPUs in around ten hours Feedly Summary: Comments AI Summary and Description: Yes Summary: The discovery of a GPU-based brute-force method to decrypt files affected by the Akira ransomware attack represents a significant breakthrough in cybersecurity. This method enables…

Wired: Bitwarden Review: The Best Password Manager

—

by