Experimental News Clipping Site

Tag: security researchers

  • Slashdot: 40,000 IoT Cameras Worldwide Stream Secrets To Anyone With a Browser

    —

    by

    Kurt Seifried
    in

    Source URL: https://tech.slashdot.org/story/25/06/10/2039202/40000-iot-cameras-worldwide-stream-secrets-to-anyone-with-a-browser?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: 40,000 IoT Cameras Worldwide Stream Secrets To Anyone With a Browser Feedly Summary: AI Summary and Description: Yes Summary: The report highlights a significant vulnerability in internet-connected cameras, with researchers accessing 40,000 live feeds, particularly emphasizing the risk posed to national security and personal privacy. It underscores the necessity…

  • Tomasz Tunguz: Partnering with Maze Security

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.tomtunguz.com/partnering-with-maze/ Source: Tomasz Tunguz Title: Partnering with Maze Security Feedly Summary: Doctors and security research have more in common than you might think. Doctors defend human bodies against an ever-shifting landscape of viruses & infections. Security researchers do the same thing, but at massive scale—protecting thousands of servers instead of a single patient.…

  • The Register: Peep show: 40K IoT cameras worldwide stream secrets to anyone with a browser

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/06/10/40000_iot_cameras_exposed/ Source: The Register Title: Peep show: 40K IoT cameras worldwide stream secrets to anyone with a browser Feedly Summary: Majority of exposures located in the US, including datacenters, healthcare facilities, factories, and more Security researchers managed to access the live feeds of 40,000 internet-connected cameras worldwide and they may have only scratched…

  • The Register: Meta pauses mobile port tracking tech on Android after researchers cry foul

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/06/03/meta_pauses_android_tracking_tech/ Source: The Register Title: Meta pauses mobile port tracking tech on Android after researchers cry foul Feedly Summary: Zuckercorp and Yandex used localhost loophole to tie browser data to app users, say boffins Security researchers say Meta and Yandex used native Android apps to listen on localhost ports, allowing them to link…

  • OpenAI : Scaling security with responsible disclosure

    —

    by

    Kurt Seifried
    in

    Source URL: https://openai.com/index/scaling-coordinated-vulnerability-disclosure Source: OpenAI Title: Scaling security with responsible disclosure Feedly Summary: OpenAI introduces its Outbound Coordinated Disclosure Policy to guide how it responsibly reports vulnerabilities in third-party software—emphasizing integrity, collaboration, and proactive security at scale. AI Summary and Description: Yes Summary: OpenAI’s introduction of its Outbound Coordinated Disclosure Policy marks a significant step…

  • Slashdot: How Many Qubits Will It Take to Break Secure Public Key Cryptography Algorithms?

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/05/24/0530234/how-many-qubits-will-it-take-to-break-secure-public-key-cryptography-algorithms Source: Slashdot Title: How Many Qubits Will It Take to Break Secure Public Key Cryptography Algorithms? Feedly Summary: AI Summary and Description: Yes Summary: Google security researchers have demonstrated a significant reduction in qubit requirements for breaking 2048-bit RSA encryption using quantum computing. This emphasizes the need for timely migration to post-quantum…

  • The Cloudflare Blog: Resolving a request smuggling vulnerability in Pingora

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.cloudflare.com/resolving-a-request-smuggling-vulnerability-in-pingora/ Source: The Cloudflare Blog Title: Resolving a request smuggling vulnerability in Pingora Feedly Summary: Cloudflare patched a vulnerability (CVE-2025-4366) in the Pingora OSS framework, which exposed users of the framework and Cloudflare CDN’s free tier to potential request smuggling attacks. AI Summary and Description: Yes Summary: The text discusses a recently discovered…

  • The Register: ‘Ongoing’ Ivanti hijack bug exploitation reaches clouds

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/05/21/ivanti_rce_attacks_ongoing/ Source: The Register Title: ‘Ongoing’ Ivanti hijack bug exploitation reaches clouds Feedly Summary: Nothing like insecure code in security suites The “ongoing exploitation" of two Ivanti bugs has now extended beyond on-premises environments and hit customers’ cloud instances, according to security shop Wiz.… AI Summary and Description: Yes Summary: The text highlights…

  • The Register: Freshly discovered bug in OpenPGP.js undermines whole point of encrypted comms

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/05/20/openpgp_js_flaw/ Source: The Register Title: Freshly discovered bug in OpenPGP.js undermines whole point of encrypted comms Feedly Summary: Update before that proof-of-concept comes to bite Security researchers are sounding the alarm over a fresh flaw in the JavaScript implementation of OpenPGP (OpenPGP.js) that allows both signed and encrypted messages to be spoofed.… AI…