Tag: uth

Source URL: https://www.schneier.com/blog/archives/2025/03/more-countries-are-demanding-back-doors-to-encrypted-apps.html Source: Schneier on Security Title: More Countries are Demanding Back-Doors to Encrypted Apps Feedly Summary: Last month I wrote about the UK forcing Apple to break its Advanced Data Protection encryption in iCloud. More recently, both Sweden and France are contemplating mandating back doors. Both initiatives are attempting to scare people into…

The Register: Oracle Cloud says it’s not true someone broke into its login servers and stole data

—

by

Source URL: https://www.theregister.com/2025/03/23/oracle_cloud_customers_keys_credentials/ Source: The Register Title: Oracle Cloud says it’s not true someone broke into its login servers and stole data Feedly Summary: Despite evidence to the contrary as alleged pilfered info goes on sale Oracle has straight up denied claims by a miscreant that its public cloud offering has been compromised and information…

Hacker News: Supply Chain Attacks on Linux Distributions – Fedora Pagure

—

by

Source URL: https://fenrisk.com/pagure Source: Hacker News Title: Supply Chain Attacks on Linux Distributions – Fedora Pagure Feedly Summary: Comments AI Summary and Description: Yes Summary: The article highlights significant security vulnerabilities found in the Pagure software forge used by Fedora, detailing an argument injection flaw (CVE-2024-47516) that allows attackers to manipulate file outputs and potentially…

Hacker News: Next.js and the corrupt middleware: the authorizing artifact

—

by

Source URL: https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware Source: Hacker News Title: Next.js and the corrupt middleware: the authorizing artifact Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses a critical security vulnerability discovered in Next.js, a widely used JavaScript framework, specifically regarding its middleware functionality. The vulnerability allows unauthorized access by manipulating request headers, which could…

Hacker News: Hack: 6M Records for Sale Exfiltrated from Oracle Cloud Affecting 140k+ Tenants

—

by

Source URL: https://cloudsek.com/blog/the-biggest-supply-chain-hack-of-2025-6m-records-for-sale-exfiltrated-from-oracle-cloud-affecting-over-140k-tenants Source: Hacker News Title: Hack: 6M Records for Sale Exfiltrated from Oracle Cloud Affecting 140k+ Tenants Feedly Summary: Comments AI Summary and Description: Yes Summary: The text details a significant security incident involving a threat actor who extracted sensitive data from Oracle Cloud’s SSO and LDAP. The breach affects over 140,000 tenants…

Hacker News: CVE-2025-29927 – Next.js

—

by

Source URL: https://nextjs.org/blog/cve-2025-29927 Source: Hacker News Title: CVE-2025-29927 – Next.js Feedly Summary: Comments AI Summary and Description: Yes Summary: The release of Next.js version 15.2.3 addresses a critical security vulnerability (CVE-2025-29927) that could allow unauthorized access by skipping essential middleware security checks. The update underscores the necessity for timely patching in software development and highlights…

Hacker News: Trapping misbehaving bots in an AI Labyrinth

—

by

Source URL: https://blog.cloudflare.com/ai-labyrinth/ Source: Hacker News Title: Trapping misbehaving bots in an AI Labyrinth Feedly Summary: Comments AI Summary and Description: Yes Summary: The announcement of AI Labyrinth by Cloudflare introduces an innovative approach that employs AI-generated content to thwart unauthorized AI crawlers. This method allows organizations to protect their websites while simultaneously identifying and…

Hacker News: IETF setting standards for AI preferences

—

by

Source URL: https://www.ietf.org/blog/aipref-wg/ Source: Hacker News Title: IETF setting standards for AI preferences Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the formation of the AI Preferences (AIPREF) Working Group, aimed at standardizing how content preferences are expressed for AI model training, amid concerns from content publishers about unauthorized use. This…

Slashdot: Cloudflare Turns AI Against Itself With Endless Maze of Irrelevant Facts

—

by