Experimental News Clipping Site

Tag: Security Researcher

  • Wired: Exposed DeepSeek Database Revealed Chat Prompts and Internal Data

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.wired.com/story/exposed-deepseek-database-revealed-chat-prompts-and-internal-data/ Source: Wired Title: Exposed DeepSeek Database Revealed Chat Prompts and Internal Data Feedly Summary: China-based DeepSeek has exploded in popularity, drawing greater scrutiny. Case in point: Security researchers found more than 1 million records, including user data and API keys, in an open database. AI Summary and Description: Yes Summary: The text…

  • Hacker News: Microsoft Probing If DeepSeek-Linked Group Improperly Obtained OpenAI Data

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.bloomberg.com/news/articles/2025-01-29/microsoft-probing-if-deepseek-linked-group-improperly-obtained-openai-data Source: Hacker News Title: Microsoft Probing If DeepSeek-Linked Group Improperly Obtained OpenAI Data Feedly Summary: Comments AI Summary and Description: Yes Summary: Microsoft and OpenAI are reportedly investigating a potential data exfiltration incident involving their technology linked to a Chinese AI startup, DeepSeek. This raises critical concerns about security and integrity in…

  • The Register: SLAP, Apple, and FLOP: Safari, Chrome at risk of data theft on iPhone, Mac Silicon

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/29/flop_and_slap_attacks_apple_silicon/ Source: The Register Title: SLAP, Apple, and FLOP: Safari, Chrome at risk of data theft on iPhone, Mac Silicon Feedly Summary: It’s another cousin of Spectre, here to read your email, browsing history, and more Many recent Apple laptops, desktops, tablets, and phones powered by Cupertino’s homegrown Silicon processors can be exploited…

  • Hacker News: New Apple CPU side-channel attacks steals data from browsers

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.bleepingcomputer.com/news/security/new-apple-cpu-side-channel-attack-steals-data-from-browsers/ Source: Hacker News Title: New Apple CPU side-channel attacks steals data from browsers Feedly Summary: Comments AI Summary and Description: Yes Summary: A recent disclosure by security researchers reveals critical side-channel vulnerabilities in modern Apple processors, specifically regarding the FLOP and SLAP attacks. These flaws exploit speculative execution mechanisms to leak sensitive…

  • Slashdot: Software Flaw Exposes Millions of Subarus, Rivers of Driver Data

    —

    by

    Kurt Seifried
    in

    Source URL: https://yro.slashdot.org/story/25/01/28/0013226/software-flaw-exposes-millions-of-subarus-rivers-of-driver-data?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Software Flaw Exposes Millions of Subarus, Rivers of Driver Data Feedly Summary: AI Summary and Description: Yes Summary: The report highlights significant vulnerabilities in Subaru’s STARLINK telematics software, which permitted unauthorized access to numerous vehicles through easily accessible data. This case underscores ongoing security concerns in connected vehicle technologies,…

  • The Register: CDNs: Great for speeding up the internet, bad for location privacy

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/27/cloudflare_cdn_location_data/ Source: The Register Title: CDNs: Great for speeding up the internet, bad for location privacy Feedly Summary: Also, Subaru web portal spills user deets, Tornado Cash sanctions overturned, a Stark ransomware attack, and more Infosec in brief Using a custom-built tool, a 15-year-old hacker exploited Cloudflare’s content delivery network to approximate the…

  • Hacker News: Curl Project and Go Security Teams Reject CVSS as Broken

    —

    by

    Kurt Seifried
    in

    Source URL: https://socket.dev/blog/curl-project-and-go-security-teams-reject-cvss-as-broken Source: Hacker News Title: Curl Project and Go Security Teams Reject CVSS as Broken Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The debate surrounding the efficacy of the Common Vulnerability Scoring System (CVSS) is intensifying, particularly as key projects like cURL and Go distance themselves from it, advocating for context-driven…

  • Wired: Subaru Security Flaws Exposed Its System for Tracking Millions of Cars

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.wired.com/story/subaru-location-tracking-vulnerabilities/ Source: Wired Title: Subaru Security Flaws Exposed Its System for Tracking Millions of Cars Feedly Summary: Now-fixed web bugs allowed hackers to remotely unlock and start millions of Subarus. More disturbingly, they could also access at least a year of cars’ location histories—and Subaru employees still can. AI Summary and Description: Yes…

  • Slashdot: Mastercard DNS Error Went Unnoticed for Years

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/01/22/1851200/mastercard-dns-error-went-unnoticed-for-years?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Mastercard DNS Error Went Unnoticed for Years Feedly Summary: AI Summary and Description: Yes Summary: A security researcher uncovered a five-year-long critical DNS misconfiguration in Mastercard’s systems that created significant security risks. The incident highlights the vulnerabilities in domain configurations which are vital to maintain robust information security practices.…

  • Hacker News: Mastercard DNS Error Went Unnoticed for Years

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/01/mastercard-dns-error-went-unnoticed-for-years/ Source: Hacker News Title: Mastercard DNS Error Went Unnoticed for Years Feedly Summary: Comments AI Summary and Description: Yes Summary: The incident involving MasterCard’s DNS misconfiguration underscores the critical importance of accurate DNS management as a security measure in the financial sector. The flaw, which existed for nearly five years, highlights potential…