Experimental News Clipping Site

Tag: unauthorized access

  • The Register: Patch procrastination leaves 50,000 Fortinet firewalls vulnerable to zero-day

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/21/fortinet_firewalls_still_vulnerable/ Source: The Register Title: Patch procrastination leaves 50,000 Fortinet firewalls vulnerable to zero-day Feedly Summary: Seven days after disclosure and little action taken, data shows Fortinet customers need to get with the program and apply the latest updates as nearly 50,000 management interfaces are still vulnerable to the latest zero-day exploit.… AI…

  • The Register: HPE probes IntelBroker’s bold data theft boasts

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/21/hpe_intelbroker_claims/ Source: The Register Title: HPE probes IntelBroker’s bold data theft boasts Feedly Summary: Incident response protocols engaged following claims of source code burglary Hewlett Packard Enterprise (HPE) is probing assertions made by prolific Big Tech intruder IntelBroker that they broke into the US corporation’s systems and accessed source code, among other things.……

  • Anchore: A Complete Guide to Container Security

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/container-security/ Source: Anchore Title: A Complete Guide to Container Security Feedly Summary: This blog post has been archived and replaced by the supporting pillar page that can be found here: https://anchore.com/wp-admin/post.php?post=987474704&action=edit The blog post is meant to remain “public” so that it will continue to show on the /blog feed. This will help…

  • Hacker News: Reverse Engineering Call of Duty Anti-Cheat

    —

    by

    Kurt Seifried
    in

    Source URL: https://ssno.cc/posts/reversing-tac-1-4-2025/ Source: Hacker News Title: Reverse Engineering Call of Duty Anti-Cheat Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text presents an in-depth analysis of the user-mode anti-cheat mechanism employed in the video game “Call of Duty: Black Ops Cold War,” referred to as TAC (Treyarch Anti-Cheat). It details the obfuscation…

  • The Register: Datacus extractus: Harry Potter publisher breached without resorting to magic

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/20/harry_potter_publisher_breach/ Source: The Register Title: Datacus extractus: Harry Potter publisher breached without resorting to magic Feedly Summary: PLUS: Allstate sued for allegedly tracking drivers; Dutch DDoS; More fake jobs from Pyongyang; and more Infosec in brief Hogwarts doesn’t teach an incantation that could have saved Harry Potter publisher Scholastic from feeling the power…

  • Hacker News: Windows BitLocker – Screwed Without a Screwdriver

    —

    by

    Kurt Seifried
    in

    Source URL: https://neodyme.io/en/blog/bitlocker_screwed_without_a_screwdriver Source: Hacker News Title: Windows BitLocker – Screwed Without a Screwdriver Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses a security vulnerability dubbed “bitpixie” that affects BitLocker encryption on Windows devices, allowing unauthorized access to the encryption key without the need for physical disassembly of the machine. It…

  • Hacker News: Thoughts on having SSH allow password authentication from the Internet

    —

    by

    Kurt Seifried
    in

    Source URL: https://utcc.utoronto.ca/~cks/space/blog/sysadmin/SSHOnExposingPasswordAuth Source: Hacker News Title: Thoughts on having SSH allow password authentication from the Internet Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses the security implications of using SSH (Secure Shell) for remote server access, particularly the advantages and disadvantages of disabling password-based authentication in favor of public key…

  • The Register: FCC to telcos: Did you know you must by law secure your networks from foreign spies?

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/17/fcc_telcos_calea/ Source: The Register Title: FCC to telcos: Did you know you must by law secure your networks from foreign spies? Feedly Summary: Plus: Uncle Sam is cross with this one Chinese biz over Salt Typhoon mega-snooping Decades-old legislation requiring American telcos to lock down their systems to prevent foreign snoops from intercepting…

  • METR updates – METR: Comment on NIST RMF GenAI Companion

    —

    by

    Kurt Seifried
    in

    Source URL: https://downloads.regulations.gov/NIST-2024-0001-0075/attachment_2.pdf Source: METR updates – METR Title: Comment on NIST RMF GenAI Companion Feedly Summary: AI Summary and Description: Yes **Summary**: The provided text discusses the National Institute of Standards and Technology’s (NIST) AI Risk Management Framework concerning Generative AI. It outlines significant risks posed by autonomous AI systems and suggests enhancements to…