security vulnerability – Page 15 – Experimental News Clipping Site

The Register: Why the long name? Okta discloses auth bypass bug affecting 52-character usernames

Nov 4, 2024

—

by

Source URL: https://www.theregister.com/2024/11/04/why_the_long_name_okta/ Source: The Register Title: Why the long name? Okta discloses auth bypass bug affecting 52-character usernames Feedly Summary: Mondays are for checking months of logs, apparently, if MFA’s not enabled In potentially bad news for those with long names and/or employers with verbose domain names, Okta spotted a security hole that could…

Hacker News: Okta – Username Above 52 Characters Security Advisory

Nov 2, 2024

—

by

system automation

in Uncategorized

Source URL: https://trust.okta.com/security-advisories/okta-ad-ldap-delegated-authentication-username/ Source: Hacker News Title: Okta – Username Above 52 Characters Security Advisory Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a security vulnerability identified in Okta’s authentication process involving the DelAuth mechanism and the Bcrypt hashing algorithm. The significance lies in its implications for user authentication security and…

Simon Willison’s Weblog: From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code

Nov 1, 2024

—

by

system automation

in Uncategorized

Source URL: https://simonwillison.net/2024/Nov/1/from-naptime-to-big-sleep/#atom-everything Source: Simon Willison’s Weblog Title: From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code Feedly Summary: From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code Google’s Project Zero security team used a system based around Gemini 1.5 Pro to find…

Slashdot: Local Privilege Escalation Vulnerability Affecting X.Org Server For 18 Years

Oct 29, 2024

—

by

system automation

in Uncategorized

Source URL: https://it.slashdot.org/story/24/10/29/2029233/local-privilege-escalation-vulnerability-affecting-xorg-server-for-18-years?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Local Privilege Escalation Vulnerability Affecting X.Org Server For 18 Years Feedly Summary: AI Summary and Description: Yes Summary: The text discusses CVE-2024-9632, a security vulnerability in the X.Org Server that has persisted for 18 years. This flaw could allow for local privilege escalation and is critical for professionals involved…

Simon Willison’s Weblog: ZombAIs: From Prompt Injection to C2 with Claude Computer Use

Oct 25, 2024

—

by

system automation

in Uncategorized

Source URL: https://simonwillison.net/2024/Oct/25/zombais/ Source: Simon Willison’s Weblog Title: ZombAIs: From Prompt Injection to C2 with Claude Computer Use Feedly Summary: ZombAIs: From Prompt Injection to C2 with Claude Computer Use In news that should surprise nobody who has been paying attention, Johann Rehberger has demonstrated a prompt injection attack against the new Claude Computer Use…

Hacker News: When Samsung meets MediaTek: the story of a small bug chain [pdf]

Oct 25, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.sstic.org/media/SSTIC2024/SSTIC-actes/when_vendor1_meets_vendor2_the_story_of_a_small_bu/SSTIC2024-Article-when_vendor1_meets_vendor2_the_story_of_a_small_bug_chain-rossi-bellom_neveu.pdf Source: Hacker News Title: When Samsung meets MediaTek: the story of a small bug chain [pdf] Feedly Summary: Comments AI Summary and Description: Yes Summary: The text details a significant security vulnerability found in the boot chain of Samsung mobile devices using MediaTek System-on-Chips. The vulnerability, which can allow an attacker with…

The Register: AWS Cloud Development Kit flaw exposed accounts to full takeover

Oct 24, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/24/aws_cloud_development_kit_flaw/ Source: The Register Title: AWS Cloud Development Kit flaw exposed accounts to full takeover Feedly Summary: Remember Bucket Monopoly? Yeah, there’s more Amazon Web Services has fixed a flaw in its open source Cloud Development Kit (CDK) that, under the right conditions, could allow an attacker to completely hijack an account.… AI…

The Register: Samsung phone users under attack, Google warns

Oct 24, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/24/samsung_phone_eop_attacks/ Source: The Register Title: Samsung phone users under attack, Google warns Feedly Summary: Don’t ignore this nasty zero day exploit says TAG A nasty bug in Samsung’s mobile chips is being exploited by miscreants as part of an exploit chain to escalate privileges and then remotely execute arbitrary code, according to Google…

The Register: Warning! FortiManager critical vulnerability under active attack

Oct 23, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/23/fortimanager_critical_vulnerability/ Source: The Register Title: Warning! FortiManager critical vulnerability under active attack Feedly Summary: Security shop and CISA urge rapid action Fortinet has gone public with news of a critical flaw in its software management platform.… AI Summary and Description: Yes Summary: The text discusses a critical security vulnerability in Fortinet’s FortiManager control…

The Register: Microsoft SharePoint RCE flaw exploits in the wild – you’ve had 3 months to patch

Oct 23, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/23/microsoft_sharepoint_rce_exploited/ Source: The Register Title: Microsoft SharePoint RCE flaw exploits in the wild – you’ve had 3 months to patch Feedly Summary: Plus, a POC to make it extra easy for attackers A Microsoft SharePoint bug that can allow an attacker to remotely inject code into vulnerable versions is under active exploitation, according…

Tag: security vulnerability