Experimental News Clipping Site

Tag: security weakness

  • Hacker News: Chunking Attacks on File Backup Services Using Content-Defined Chunking [pdf]

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.daemonology.net/blog/chunking-attacks.pdf Source: Hacker News Title: Chunking Attacks on File Backup Services Using Content-Defined Chunking [pdf] Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text details various parameter-extraction attacks on file backup services utilizing content-defined chunking (CDC) techniques. The authors explore vulnerabilities associated with the use of user-specific secret parameters in CDC…

  • Rekt: ByBit – Rekt

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.rekt.news/bybit-rekt Source: Rekt Title: ByBit – Rekt Feedly Summary: $1.43B heist on ByBit claims the throne on our Rekt Leaderboard! Lazarus pulled off the perfect digital sleight-of-hand, making multisig signers see legitimate transactions while signing away the keys to the kingdom. Now ByBit’s offering $140M to catch the hackers. AI Summary and Description:…

  • Slashdot: Hackers Call Current AI Security Testing ‘Bullshit’

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/02/11/191240/hackers-call-current-ai-security-testing-bullshit?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Hackers Call Current AI Security Testing ‘Bullshit’ Feedly Summary: AI Summary and Description: Yes Summary: The DEF CON conference has highlighted serious flaws in current AI security practices, specifically criticizing the limitations of red teaming for identifying vulnerabilities in AI systems. Researchers advocate for a new framework for documenting…

  • The Register: Microsoft eggheads say AI can never be made secure – after testing Redmond’s own products

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/17/microsoft_ai_redteam_infosec_warning/ Source: The Register Title: Microsoft eggheads say AI can never be made secure – after testing Redmond’s own products Feedly Summary: If you want a picture of the future, imagine your infosec team stamping on software forever Microsoft brainiacs who probed the security of more than 100 of the software giant’s own…

  • The Register: Raspberry Pi hands out prizes to all in the RP2350 Hacking Challenge

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/16/raspberry_pi_awards_prizes_for/ Source: The Register Title: Raspberry Pi hands out prizes to all in the RP2350 Hacking Challenge Feedly Summary: Power-induced glitches, lasers, and electromagnetic fields are all tools of the trade Raspberry Pi has given out prizes for extracting a secret value from the one-time-programmable (OTP) memory of the Raspberry Pi RP2350 microcontroller…

  • Slashdot: DHS Says China, Russia, Iran, and Israel Are Spying on People in US with SS7

    —

    by

    system automation
    in

    Source URL: https://news.slashdot.org/story/24/12/17/1844234/dhs-says-china-russia-iran-and-israel-are-spying-on-people-in-us-with-ss7?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: DHS Says China, Russia, Iran, and Israel Are Spying on People in US with SS7 Feedly Summary: AI Summary and Description: Yes Summary: The text highlights the concerns raised by the Department of Homeland Security (DHS) regarding the exploitation of telecommunications networks by certain countries, particularly in relation to…

  • Krebs on Security: Patch Tuesday, December 2024 Edition

    —

    by

    system automation
    in

    Source URL: https://krebsonsecurity.com/2024/12/patch-tuesday-december-2024-edition/ Source: Krebs on Security Title: Patch Tuesday, December 2024 Edition Feedly Summary: Microsoft today released updates to plug at least 70 security holes in Windows and Windows software, including one vulnerability that is already being exploited in active attacks. The zero-day seeing exploitation involves CVE-2024-49138, a security weakness in the Windows Common……

  • Slashdot: Hacker In Snowflake Extortions May Be a US Soldier

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/24/11/27/1958219/hacker-in-snowflake-extortions-may-be-a-us-soldier?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Hacker In Snowflake Extortions May Be a US Soldier Feedly Summary: AI Summary and Description: Yes Summary: The text highlights a significant data breach involving the cloud storage company Snowflake, where hackers exploited weak security measures to steal sensitive data from numerous companies. The story underscores the challenges of…