Experimental News Clipping Site

Tag: security flaws

  • The Register: VMware plugs steal-my-credentials holes in Cloud Foundation

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/30/vmware_infomration_disclosure_flaws/ Source: The Register Title: VMware plugs steal-my-credentials holes in Cloud Foundation Feedly Summary: Consider patching soon because cybercrooks love to hit vulnerable tools from Broadcom’s virtualization giant Broadcom has fixed five flaws, collectively deemed “high severity," in VMware’s IT operations and log management tools within Cloud Foundation, including two information disclosure bugs…

  • The Register: Canvassing apps used by UK political parties riddled with privacy, security issues

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/30/uk_canvassing_app_issues/ Source: The Register Title: Canvassing apps used by UK political parties riddled with privacy, security issues Feedly Summary: Neither Labour, Conservatives, nor the Lib Dems offered a retort to rights org’s report The Open Rights Group (ORG) has raised concerns about a number of security issues it found in all three of…

  • The Register: Apple plugs security hole in its iThings that’s already been exploited in iOS

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/28/apple_cve_2025_24085/ Source: The Register Title: Apple plugs security hole in its iThings that’s already been exploited in iOS Feedly Summary: Cupertino kicks off the year with a zero-day Apple has plugged a security hole in the software at the heart of its iPhones, iPads, Vision Pro goggles, Apple TVs and macOS Sequoia Macs, warning…

  • Slashdot: Software Flaw Exposes Millions of Subarus, Rivers of Driver Data

    —

    by

    Kurt Seifried
    in

    Source URL: https://yro.slashdot.org/story/25/01/28/0013226/software-flaw-exposes-millions-of-subarus-rivers-of-driver-data?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Software Flaw Exposes Millions of Subarus, Rivers of Driver Data Feedly Summary: AI Summary and Description: Yes Summary: The report highlights significant vulnerabilities in Subaru’s STARLINK telematics software, which permitted unauthorized access to numerous vehicles through easily accessible data. This case underscores ongoing security concerns in connected vehicle technologies,…

  • Slashdot: Researchers Say New Attack Could Take Down the European Power Grid

    —

    by

    Kurt Seifried
    in

    Source URL: https://hardware.slashdot.org/story/25/01/25/0037206/researchers-say-new-attack-could-take-down-the-european-power-grid?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Researchers Say New Attack Could Take Down the European Power Grid Feedly Summary: AI Summary and Description: Yes Summary: The text highlights significant security vulnerabilities in renewable energy facilities across Central Europe, where unencrypted radio signals are used to control energy supply to the grid. Researchers inadvertently uncovered this…

  • Rekt: Phemex – Rekt

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.rekt.news/phemex-rekt Source: Rekt Title: Phemex – Rekt Feedly Summary: When your hot wallets become 16 points of failure, $73M makes an expensive lesson in access control. From Ethereum to Solana, CEX Phemex just demonstrated how to turn multi-chain support into a masterclass in multi-chain mayhem. AI Summary and Description: Yes Summary: The text…

  • The Register: One of Salt Typhoon’s favorite flaws still wide open on 91% of at-risk Exchange Servers

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/23/proxylogon_flaw_salt_typhoons_open/ Source: The Register Title: One of Salt Typhoon’s favorite flaws still wide open on 91% of at-risk Exchange Servers Feedly Summary: But we mean, you’ve had nearly four years to patch One of the critical security flaws exploited by China’s Salt Typhoon to breach US telecom and government networks has had a…

  • Wired: Subaru Security Flaws Exposed Its System for Tracking Millions of Cars

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.wired.com/story/subaru-location-tracking-vulnerabilities/ Source: Wired Title: Subaru Security Flaws Exposed Its System for Tracking Millions of Cars Feedly Summary: Now-fixed web bugs allowed hackers to remotely unlock and start millions of Subarus. More disturbingly, they could also access at least a year of cars’ location histories—and Subaru employees still can. AI Summary and Description: Yes…

  • The Register: Raspberry Pi hands out prizes to all in the RP2350 Hacking Challenge

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/16/raspberry_pi_awards_prizes_for/ Source: The Register Title: Raspberry Pi hands out prizes to all in the RP2350 Hacking Challenge Feedly Summary: Power-induced glitches, lasers, and electromagnetic fields are all tools of the trade Raspberry Pi has given out prizes for extracting a secret value from the one-time-programmable (OTP) memory of the Raspberry Pi RP2350 microcontroller…

  • The Register: Crypto klepto North Korea stole $659M over just 5 heists last year

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/15/north_korea_crypto_heists/ Source: The Register Title: Crypto klepto North Korea stole $659M over just 5 heists last year Feedly Summary: US, Japan, South Korea vow to intensify counter efforts North Korean blockchain bandits stole more than half a billion dollars in cryptocurrency in 2024 alone, the US, Japan, and South Korea say.… AI Summary…