Experimental News Clipping Site

Tag: remote exploitation

  • Slashdot: Coinbase Reverses Remote-First Policy After North Korean Infiltration Attempts

    —

    by

    Kurt Seifried
    in

    Source URL: https://slashdot.org/story/25/08/22/1515238/coinbase-reverses-remote-first-policy-after-north-korean-infiltration-attempts?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Coinbase Reverses Remote-First Policy After North Korean Infiltration Attempts Feedly Summary: AI Summary and Description: Yes Summary: The text highlights the increasing security vulnerabilities associated with remote work policies, particularly in sensitive roles within cryptocurrency firms. It emphasizes the proactive measures taken by Coinbase to mitigate these risks, including…

  • Hacker News: Undocumented backdoor found in Bluetooth chip used by a billion devices

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.bleepingcomputer.com/news/security/undocumented-backdoor-found-in-bluetooth-chip-used-by-a-billion-devices/ Source: Hacker News Title: Undocumented backdoor found in Bluetooth chip used by a billion devices Feedly Summary: Comments AI Summary and Description: Yes Summary: The discovery of an undocumented backdoor in the widely used ESP32 microchip presents significant security risks, especially in IoT devices. This backdoor allows for device spoofing, unauthorized access,…

  • Krebs on Security: Microsoft: Happy 2025. Here’s 161 Security Updates

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/01/microsoft-happy-2025-heres-161-security-updates/ Source: Krebs on Security Title: Microsoft: Happy 2025. Here’s 161 Security Updates Feedly Summary: Microsoft today unleashed updates to plug a whopping 161 security vulnerabilities in Windows and related software, including three “zero-day" weaknesses that are already under active attack. Redmond’s inaugural Patch Tuesday of 2025 bundles more fixes than the company…

  • Hacker News: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

    —

    by

    system automation
    in

    Source URL: https://www.wired.com/story/russia-gru-apt28-wifi-daisy-chain-breach/ Source: Hacker News Title: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a novel Wi-Fi hacking technique identified by cybersecurity researchers, particularly a type of attack dubbed the “nearest neighbor attack,” which allows hackers to…

  • Cisco Talos Blog: NVIDIA shader out-of-bounds and eleven LevelOne router vulnerabilities

    —

    by

    system automation
    in

    Source URL: https://blog.talosintelligence.com/nvidia-shader-out-of-bounds-and-level1-2/ Source: Cisco Talos Blog Title: NVIDIA shader out-of-bounds and eleven LevelOne router vulnerabilities Feedly Summary: Cisco Talos’ Vulnerability Research team recently discovered five Nvidia out-of-bounds access vulnerabilities in shader processing, as well as eleven LevelOne router vulnerabilities spanning a range of possible exploits.For Snort coverage that can detect the exploitation of these…

  • Alerts: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/10/30/fortinet-updates-guidance-and-indicators-compromise-following-fortimanager-vulnerability Source: Alerts Title: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation Feedly Summary: Fortinet has updated their security advisory addressing a critical FortiManager vulnerability (CVE-2024-47575) to include additional workarounds and indicators of compromise (IOCs). A remote, unauthenticated cyber threat actor could exploit this vulnerability to gain access to sensitive…

  • Slashdot: Local Privilege Escalation Vulnerability Affecting X.Org Server For 18 Years

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/24/10/29/2029233/local-privilege-escalation-vulnerability-affecting-xorg-server-for-18-years?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Local Privilege Escalation Vulnerability Affecting X.Org Server For 18 Years Feedly Summary: AI Summary and Description: Yes Summary: The text discusses CVE-2024-9632, a security vulnerability in the X.Org Server that has persisted for 18 years. This flaw could allow for local privilege escalation and is critical for professionals involved…

  • Hacker News: RCE Vulnerability Discovered in Cups

    —

    by

    system automation
    in

    Source URL: https://gist.github.com/stong/c8847ef27910ae344a7b5408d9840ee1 Source: Hacker News Title: RCE Vulnerability Discovered in Cups Feedly Summary: Comments AI Summary and Description: Yes **Short Summary with Insight:** The text details a significant vulnerability within the CUPS (Common UNIX Printing System) printing system, which can be exploited to execute arbitrary code on target systems when a malicious printer is…