Experimental News Clipping Site

Tag: security risk

  • The Register: Crims backdoored the backdoors they supplied to other miscreants. Then the domains lapsed

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/08/backdoored_backdoors/ Source: The Register Title: Crims backdoored the backdoors they supplied to other miscreants. Then the domains lapsed Feedly Summary: Here’s what $20 gets you these days More than 4,000 unique backdoors are using expired domains and/or abandoned infrastructure, and many of these expose government and academia-owned hosts – thus setting these hosts…

  • Hacker News: Online Behavioral Ads Fuel the Surveillance Industry

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.eff.org/deeplinks/2025/01/online-behavioral-ads-fuel-surveillance-industry-heres-how Source: Hacker News Title: Online Behavioral Ads Fuel the Surveillance Industry Feedly Summary: Comments AI Summary and Description: Yes Summary: The text highlights critical privacy concerns related to Real-Time Bidding (RTB) in online advertising, illustrating how it facilitates the collection and selling of sensitive personal data without appropriate regulation. This system presents…

  • Hacker News: OmniAI (YC W24) Hiring Engineers to Build Open Source Document Extraction

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.ycombinator.com/companies/omniai/jobs/LG5jeP2-full-stack-engineer Source: Hacker News Title: OmniAI (YC W24) Hiring Engineers to Build Open Source Document Extraction Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the engineering roles at Omni, focused on building advanced OCR and document extraction technologies, highlighting the challenges of working with LLMs and integrating various tech…

  • The Register: After China’s Salt Typhoon, the reconstruction starts now

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/06/opinion_column_cybersec/ Source: The Register Title: After China’s Salt Typhoon, the reconstruction starts now Feedly Summary: If 40 years of faulty building gets blown down, don’t rebuild with the rubble Opinion When a typhoon devastates a land, it takes a while to understand the scale of the destruction. Disaster relief kicks in, communications rebuilt,…

  • The Register: Telemetry data from 800K VW Group EVs exposed online

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2025/01/06/volkswagen_ev_data_exposed/ Source: The Register Title: Telemetry data from 800K VW Group EVs exposed online Feedly Summary: PLUS: DoJ bans data sale to enemy nations; Do Kwon extradited to US; Tenable CEO passes away; and more Infosec in Brief Welcome to 2025: hopefully you enjoyed a pleasant holiday season and returned to the security…

  • Hacker News: F-Droid Fake Signer PoC

    —

    by

    system automation
    in

    Source URL: https://github.com/obfusk/fdroid-fakesigner-poc Source: Hacker News Title: F-Droid Fake Signer PoC Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses vulnerabilities in the APK signing process for Android, specifically how certain implementations of fdroidserver and related tools can be exploited, leading to potential bypasses of certificate pinning. This is critical for professionals…

  • CSA: The Role of OT Security in the Oil & Gas Industry

    —

    by

    system automation
    in

    Source URL: https://cloudsecurityalliance.org/articles/the-critical-role-of-ot-security-in-the-oil-and-gas-o-g-industry Source: CSA Title: The Role of OT Security in the Oil & Gas Industry Feedly Summary: AI Summary and Description: Yes Summary: The text highlights the cybersecurity challenges faced by Operational Technology (OT) systems in the oil and gas (O&G) sector amidst digital transformation. It emphasizes the vulnerabilities arising from legacy systems,…

  • Slashdot: Hackers Target Dozens of VPN, AI Extensions For Google Chrome To Compromise Data

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/25/01/02/2157246/hackers-target-dozens-of-vpn-ai-extensions-for-google-chrome-to-compromise-data Source: Slashdot Title: Hackers Target Dozens of VPN, AI Extensions For Google Chrome To Compromise Data Feedly Summary: AI Summary and Description: Yes Summary: The text discusses serious security concerns related to malicious updates of Chrome browser extensions, especially those connected with artificial intelligence tools and VPNs. It emphasizes the risks of…

  • Embrace The Red: Microsoft 365 Copilot Generated Images Accessible Without Authentication — Fixed!

    —

    by

    system automation
    in

    Source URL: https://embracethered.com/blog/posts/2025/m365-copilot-image-generation-without-authentication/ Source: Embrace The Red Title: Microsoft 365 Copilot Generated Images Accessible Without Authentication — Fixed! Feedly Summary: I regularly look at how the system prompts of chatbots change over time. Updates frequently highlight new features being added, design changes that occur and potential areas that might benefit from more security scrutiny. A…