Tag: RoT

Source URL: https://www.theregister.com/2025/02/11/apple_ios_ipados_patches/ Source: The Register Title: Apple warns ‘extremely sophisticated attack’ may be targeting iThings Feedly Summary: Cupertino mostly uses bland language when talking security, so this sounds nasty Apple has warned that some iPhones and iPads may have been targeted by an “extremely sophisticated attack” and has posted patches that hopefully prevent it.……

Slashdot: Apple Fixes Zero-Day Exploited In ‘Extremely Sophisticated’ Attacks

—

by

Source URL: https://apple.slashdot.org/story/25/02/10/217213/apple-fixes-zero-day-exploited-in-extremely-sophisticated-attacks?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Apple Fixes Zero-Day Exploited In ‘Extremely Sophisticated’ Attacks Feedly Summary: AI Summary and Description: Yes Summary: Apple has issued urgent security updates for iOS 18.3.1 and iPadOS 18.3.1 to fix a critical zero-day vulnerability exploited in sophisticated targeted attacks. The flaw compromised the USB Restricted Mode, critical for data…

Hacker News: CAPTCHAs: ‘a tracking cookie farm for profit masquerading as a security service’

—

by

Source URL: https://www.pcgamer.com/gaming-industry/a-2023-study-concluded-captchas-are-a-tracking-cookie-farm-for-profit-masquerading-as-a-security-service-that-made-us-spend-819-billion-hours-clicking-on-traffic-lights-to-generate-nearly-usd1-trillion-for-google/ Source: Hacker News Title: CAPTCHAs: ‘a tracking cookie farm for profit masquerading as a security service’ Feedly Summary: Comments AI Summary and Description: Yes Summary: The study from UC Irvine critically evaluates Google’s reCAPTCHA v2, highlighting its inefficacy in preventing bot traffic while raising significant privacy concerns. The findings indicate that reCAPTCHA…

Hacker News: Kaspersky finds hardware backdoor in 5 generations of Apple Silicon (2024)

—

by

Source URL: https://www.xstore.co.za/stuff/2024/01/kaspersky-finds-hardware-backdoor-in-5-generations-of-apple-silicon/ Source: Hacker News Title: Kaspersky finds hardware backdoor in 5 generations of Apple Silicon (2024) Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a significant security concern regarding a hardware backdoor found in Apple’s silicon. Identified as CVE-2023-38606, this vulnerability reportedly affects five generations of Apple mobile CPUs,…

Embrace The Red: Hacking Gemini’s Memory with Prompt Injection and Delayed Tool Invocation

—

by

Source URL: https://embracethered.com/blog/posts/2025/gemini-memory-persistence-prompt-injection/ Source: Embrace The Red Title: Hacking Gemini’s Memory with Prompt Injection and Delayed Tool Invocation Feedly Summary: Imagine your AI rewriting your personal history… A while ago Google added memories to Gemini. Memories allow Gemini to store user-related data across sessions, storing information in long-term memory. The feature is only available to…

Cloud Blog: 5 ways Google Cloud can help you minimize credential theft risk

—

by

Source URL: https://cloud.google.com/blog/products/identity-security/5-ways-google-cloud-can-help-you-minimize-credential-theft-risk/ Source: Cloud Blog Title: 5 ways Google Cloud can help you minimize credential theft risk Feedly Summary: Threat actors who target cloud environments are increasingly focusing on exploiting compromised cloud identities. A compromise of human or non-human identities can lead to increased risks, including cloud resource abuse and sensitive data exfiltration. These…

Cloud Blog: Networking support for AI workloads

—

by

Source URL: https://cloud.google.com/blog/products/networking/cross-cloud-network-solutions-support-for-ai-workloads/ Source: Cloud Blog Title: Networking support for AI workloads Feedly Summary: At Google Cloud, we strive to make it easy to deploy AI models onto our infrastructure. In this blog we explore how the Cross-Cloud Network solution supports your AI workloads. Managed and Unmanaged AI options Google Cloud provides both managed (Vertex…

Bulletins: Vulnerability Summary for the Week of February 3, 2025

—

by

Source URL: https://www.cisa.gov/news-events/bulletins/sb25-041 Source: Bulletins Title: Vulnerability Summary for the Week of February 3, 2025 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info .TUBE gTLD–.TUBE Video Curator Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in .TUBE gTLD .TUBE Video Curator allows Reflected XSS. This issue affects…

Cisco Talos Blog: Small praise for modern compilers – A case of Ubuntu printing vulnerability that wasn’t

—

by