Experimental News Clipping Site

Tag: security vulnerability

  • Slashdot: DeepSeek IOS App Sends Data Unencrypted To ByteDance-Controlled Servers

    —

    by

    Kurt Seifried
    in

    Source URL: https://slashdot.org/story/25/02/08/0531202/deepseek-ios-app-sends-data-unencrypted-to-bytedance-controlled-servers?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: DeepSeek IOS App Sends Data Unencrypted To ByteDance-Controlled Servers Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a security vulnerability in the mobile application DeepSeek, which transmits sensitive data over unencrypted channels, raising significant security and privacy concerns. It highlights the implications of using infrastructure provided…

  • The Cloudflare Blog: Resolving a Mutual TLS session resumption vulnerability

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.cloudflare.com/resolving-a-mutual-tls-session-resumption-vulnerability/ Source: The Cloudflare Blog Title: Resolving a Mutual TLS session resumption vulnerability Feedly Summary: Cloudflare patched a Mutual TLS (mTLS) vulnerability (CVE-2025-23419) reported via its Bug Bounty Program. The flaw in session resumption allowed client certificates to authenticate across different AI Summary and Description: Yes Summary: The text discusses a recently discovered…

  • The Register: Google: How to make any AMD Zen CPU always generate 4 as a random number

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/04/google_amd_microcode/ Source: The Register Title: Google: How to make any AMD Zen CPU always generate 4 as a random number Feedly Summary: Malicious microcode vulnerability discovered, fixes rolling out for Epycs at least Googlers have not only figured out how to break AMD’s security – allowing them to load unofficial microcode into its…

  • Hacker News: AMD: Microcode Signature Verification Vulnerability

    —

    by

    Kurt Seifried
    in

    Source URL: https://github.com/google/security-research/security/advisories/GHSA-4xq7-4mgh-gp6w Source: Hacker News Title: AMD: Microcode Signature Verification Vulnerability Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a security vulnerability in AMD Zen-based CPUs identified by Google’s Security Team, which allows local administrator-level attacks on the microcode verification process. This is significant for professionals in infrastructure and hardware…

  • Alerts: CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/30/cisa-releases-fact-sheet-detailing-embedded-backdoor-function-contec-cms8000-firmware Source: Alerts Title: CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware Feedly Summary: CISA released a fact sheet, Contec CMS8000 Contains a Backdoor, detailing an analysis of three firmware package versions of the Contec CMS8000, a patient monitor used by the U.S. Healthcare and Public Health (HPH) sector.…

  • Hacker News: Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak Source: Hacker News Title: Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses a critical security vulnerability identified in DeepSeek’s publicly accessible ClickHouse database, which exposed sensitive information related to AI operations. Wiz Research’s responsible disclosure of an unprotected database…

  • The Register: CDNs: Great for speeding up the internet, bad for location privacy

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/27/cloudflare_cdn_location_data/ Source: The Register Title: CDNs: Great for speeding up the internet, bad for location privacy Feedly Summary: Also, Subaru web portal spills user deets, Tornado Cash sanctions overturned, a Stark ransomware attack, and more Infosec in brief Using a custom-built tool, a 15-year-old hacker exploited Cloudflare’s content delivery network to approximate the…