Tag: unauthorized access

Source URL: https://simonwillison.net/2024/Dec/8/llm-openrouter-03/#atom-everything Source: Simon Willison’s Weblog Title: llm-openrouter 0.3 Feedly Summary: llm-openrouter 0.3 New release of my llm-openrouter plugin, which allows LLM to access models hosted by OpenRouter. Quoting the release notes: Enable image attachments for models that support images. Thanks, Adam Montgomery. #12 Provide async model access. #15 Fix documentation to list correct…

The Register: Salt Typhoon forces FCC’s hand on making telcos secure their networks

Dec 6, 2024

—

by

Source URL: https://www.theregister.com/2024/12/06/salt_typhoon_fcc_proposal/ Source: The Register Title: Salt Typhoon forces FCC’s hand on making telcos secure their networks Feedly Summary: Proposal pushes stricter infosec safeguards after Chinese state baddies expose vulns The head of America’s Federal Communications Commission (FCC) wants to force telecoms operators to tighten network security in the wake of the Salt Typhoon…

Cloud Blog: Locking down Cloud Run: Inside Commerzbank’s adoption of custom org policies

Dec 6, 2024

—

by

Source URL: https://cloud.google.com/blog/topics/financial-services/commerzbank-cloud-run-custom-org-policies/ Source: Cloud Blog Title: Locking down Cloud Run: Inside Commerzbank’s adoption of custom org policies Feedly Summary: Usually, financial institutions process multiple millions of transactions daily. Obviously, when running on cloud technology, any security lapse in their cloud infrastructure might have catastrophic consequences. In serverless setups for compute workloads Cloud Run on…

The Register: PoC exploit chains Mitel MiCollab 0-day, auth-bypass bug to access sensitive files

Dec 6, 2024

—

by

Source URL: https://www.theregister.com/2024/12/06/mitel_micollab_0day/ Source: The Register Title: PoC exploit chains Mitel MiCollab 0-day, auth-bypass bug to access sensitive files Feedly Summary: Still unpatched 100+ days later, watchTowr says A zero-day arbitrary file read vulnerability in Mitel MiCollab can be chained with a now-patched critical bug in the same platform to give attackers access to sensitive…

Slashdot: Backdoor in Compromised Solana Code Library Drains $184,000 from Digital Wallets

—

by

Source URL: https://news.slashdot.org/story/24/12/05/1848223/backdoor-in-compromised-solana-code-library-drains-184000-from-digital-wallets?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Backdoor in Compromised Solana Code Library Drains $184,000 from Digital Wallets Feedly Summary: AI Summary and Description: Yes Summary: The Solana JavaScript SDK experienced a supply chain attack where malicious code was injected to steal cryptocurrency private keys. This incident highlights the vulnerabilities associated with software supply chains in…

Alerts: Cisco Releases Security Updates for NX-OS Software

—

by

Source URL: https://www.cisa.gov/news-events/alerts/2024/12/05/cisco-releases-security-updates-nx-os-software Source: Alerts Title: Cisco Releases Security Updates for NX-OS Software Feedly Summary: Cisco released security updates to address a vulnerability in Cisco NX-OS software. A cyber threat actor could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review the following advisory and apply the…

Cloud Blog: Bridging the Gap: Elevating Red Team Assessments with Application Security Testing

—

by

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/red-team-application-security-testing/ Source: Cloud Blog Title: Bridging the Gap: Elevating Red Team Assessments with Application Security Testing Feedly Summary: Written by: Ilyass El Hadi, Louis Dion-Marcil, Charles Prevost Executive Summary Whether through a comprehensive Red Team engagement or a targeted external assessment, incorporating application security (AppSec) expertise enables organizations to better simulate the tactics and…

The Register: British hospitals hit by cyberattacks still battling to get systems back online

—

by

Source URL: https://www.theregister.com/2024/12/05/hospital_cyberattack/ Source: The Register Title: British hospitals hit by cyberattacks still battling to get systems back online Feedly Summary: Children’s hospital and cardiac unit say criminals broke in via shared ‘digital gateway service’ Both National Health Service trusts that oversee the various hospitals hit by separate cyberattacks last week have confirmed they’re still…

The Register: T-Mobile US CSO: Spies jumped from one telco to another in a way ‘I’ve not seen in my career’

—

by