Experimental News Clipping Site

Tag: vulnerability

  • Hacker News: Fun with Timing Attacks

    —

    by

    Kurt Seifried
    in

    Source URL: https://ostro.ws/post-timing-attacks Source: Hacker News Title: Fun with Timing Attacks Feedly Summary: Comments AI Summary and Description: Yes Summary: The text provides an in-depth examination of a potential vulnerability within a simple JavaScript function used to compare user input against a secret value. It emphasizes how timing attacks can exploit non-constant-time comparison functions like…

  • The Register: CISA: Wow, that election had a lot of foreign trolling. Trump’s Homeland Sec pick: And that’s none of your concern

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/18/cisa_election_security_isnt_political/ Source: The Register Title: CISA: Wow, that election had a lot of foreign trolling. Trump’s Homeland Sec pick: And that’s none of your concern Feedly Summary: Cyber agency too ‘far off mission,’ says incoming boss Kristi Noem America’s lead cybersecurity agency on Friday made one final scream into the impending truth void…

  • The Register: Fortinet: FortiGate config leaks are genuine but misleading

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/17/fortinet_fortigate_config_leaks/ Source: The Register Title: Fortinet: FortiGate config leaks are genuine but misleading Feedly Summary: Competition hots up with Ivanti over who can have the worst start to a year Fortinet has confirmed that previous analyses of records leaked by the Belsen Group are indeed genuine FortiGate configs stolen during a zero-day raid…

  • Hacker News: A New type of web hacking technique: DoubleClickjacking

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.paulosyibelo.com/2024/12/doubleclickjacking-what.html Source: Hacker News Title: A New type of web hacking technique: DoubleClickjacking Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text introduces the concept of “DoubleClickjacking,” a sophisticated web vulnerability that builds upon traditional clickjacking techniques by exploiting event timing between double clicks. This novel approach allows attackers to bypass…

  • The Register: Six vulnerabilities in ubiquitous rsync tool announced and fixed in a day

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/17/rsync_vulnerabilities/ Source: The Register Title: Six vulnerabilities in ubiquitous rsync tool announced and fixed in a day Feedly Summary: Turns out tool does both file transfers and security fixes fast Don’t panic. Yes, there were a bunch of CVEs affecting potentially hundreds of thousands of users found in rsync in early December –…

  • CSA: LLM Dragons: Why DSPM is the Key to AI Security

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/articles/training-your-llm-dragons-why-dspm-is-the-key-to-ai-security Source: CSA Title: LLM Dragons: Why DSPM is the Key to AI Security Feedly Summary: AI Summary and Description: Yes Summary: The text emphasizes the security risks associated with AI implementations, particularly custom large language models (LLMs) and Microsoft Copilot. It outlines key threats such as data leakage and compliance failures and…

  • Hacker News: Uncovering Real GPU NoC Characteristics: Implications on Interconnect Arch.

    —

    by

    Kurt Seifried
    in

    Source URL: https://people.ece.ubc.ca/aamodt/publications/papers/realgpu-noc.micro2024.pdf Source: Hacker News Title: Uncovering Real GPU NoC Characteristics: Implications on Interconnect Arch. Feedly Summary: Comments AI Summary and Description: Yes Summary: The text provides a detailed examination of the Network-on-Chip (NoC) architecture in modern GPUs, particularly analyzing interconnect latency and bandwidth across different generations of NVIDIA GPUs. It discusses the implications…

  • Google Online Security Blog: OSV-SCALIBR: A library for Software Composition Analysis

    —

    by

    Kurt Seifried
    in

    Source URL: https://security.googleblog.com/2025/01/osv-scalibr-library-for-software.html Source: Google Online Security Blog Title: OSV-SCALIBR: A library for Software Composition Analysis Feedly Summary: AI Summary and Description: Yes Summary: The article discusses the launch of OSV-SCALIBR, an extensible library for software composition analysis (SCA) and file system scanning. It highlights its capabilities, including vulnerability scanning and Software Bill of Materials…

  • Cisco Talos Blog: Find the helpers

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/find-the-helpers/ Source: Cisco Talos Blog Title: Find the helpers Feedly Summary: Bill discusses how to find ‘the helpers’ and the importance of knowledge sharing. Plus, there’s a lot to talk about in our latest vulnerability roundup. AI Summary and Description: Yes Summary: This edition of the Threat Source newsletter emphasizes the importance of…

  • Alerts: CISA Adds One Known Exploited Vulnerability to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/16/cisa-adds-one-known-exploited-vulnerability-catalog Source: Alerts Title: CISA Adds One Known Exploited Vulnerability to Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks…