Tag: security breach

  • Slashdot: Thousands of Exposed GitHub Repositories, Now Private, Can Still Be Accessed Through Copilot

    Source URL: https://yro.slashdot.org/story/25/02/27/2129241/thousands-of-exposed-github-repositories-now-private-can-still-be-accessed-through-copilot?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Thousands of Exposed GitHub Repositories, Now Private, Can Still Be Accessed Through Copilot Feedly Summary: AI Summary and Description: Yes Summary: This text highlights significant security concerns raised by researchers regarding potential data exposure through generative AI tools like Microsoft Copilot. It underscores the persistence of data that can…

  • The Register: 30-year-old NHS supply chain system hit by 35 major alerts in 11 months

    Source URL: https://www.theregister.com/2025/02/27/thirtyyearold_nhs_supply_chain_system/ Source: The Register Title: 30-year-old NHS supply chain system hit by 35 major alerts in 11 months Feedly Summary: Thousands of order lines not picked, causing delays to hospital deliveries A state-owned company that handles £4.5 billion ($5.7 billion) annual spending on behalf of the NHS has suffered 35 high-priority computer system…

  • The Register: Xi know what you did last summer: China was all up in Republicans’ email, says book

    Source URL: https://www.theregister.com/2025/02/25/china_hacked_gop_emails/ Source: The Register Title: Xi know what you did last summer: China was all up in Republicans’ email, says book Feedly Summary: Of course, Microsoft is in the mix, isn’t it Chinese spies reportedly broke into the US Republication National Committee’s Microsoft-powered email and snooped around for months before being caught.… AI…

  • The Register: MITRE Caldera security suite scores perfect 10 for insecurity

    Source URL: https://www.theregister.com/2025/02/25/10_bug_mitre_caldera/ Source: The Register Title: MITRE Caldera security suite scores perfect 10 for insecurity Feedly Summary: Is a trivial remote-code execution hole in every version part of the training, or? The smart cookie who discovered a perfect 10-out-of-10-severity remote code execution (RCE) bug in MITRE’s Caldera security training platform has urged users to…

  • Alerts: CISA Releases Two Industrial Control Systems Advisories

    Source URL: https://www.cisa.gov/news-events/alerts/2025/02/25/cisa-releases-two-industrial-control-systems-advisories Source: Alerts Title: CISA Releases Two Industrial Control Systems Advisories Feedly Summary: CISA released two Industrial Control Systems (ICS) advisories on February 25, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-056-01 Rockwell Automation PowerFlex 755  ICSMA-25-030-01 Contec Health CMS8000 Patient Monitor (Update A)  CISA…

  • Rekt: Infini – Rekt

    Source URL: https://www.rekt.news/infini-rekt Source: Rekt Title: Infini – Rekt Feedly Summary: The perfect DeFi hack. No flash loans, no zero-days. Just a rogue dev who built a backdoor, waited 114 days, then drained $49.5M from Infini with admin privileges. Same old story, new-age incompetence. When will protocols learn that admin keys aren’t toys? AI Summary…

  • Rekt: ByBit – Rekt

    Source URL: https://www.rekt.news/bybit-rekt Source: Rekt Title: ByBit – Rekt Feedly Summary: $1.43B heist on ByBit claims the throne on our Rekt Leaderboard! Lazarus pulled off the perfect digital sleight-of-hand, making multisig signers see legitimate transactions while signing away the keys to the kingdom. Now ByBit’s offering $140M to catch the hackers. AI Summary and Description:…

  • Hacker News: The $1.5B Bybit Hack: The Era of Operational Security Failures Has Arrived

    Source URL: https://blog.trailofbits.com/2025/02/21/the-1.5b-bybit-hack-the-era-of-operational-security-failures-has-arrived/ Source: Hacker News Title: The $1.5B Bybit Hack: The Era of Operational Security Failures Has Arrived Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a significant operation security breach in the cryptocurrency domain, highlighting how sophisticated attackers, particularly North Korean state-sponsored threat actors, have shifted from exploiting vulnerabilities…