Experimental News Clipping Site

Tag: zero-day

  • Hacker News: Kaspersky finds hardware backdoor in 5 generations of Apple Silicon (2024)

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.xstore.co.za/stuff/2024/01/kaspersky-finds-hardware-backdoor-in-5-generations-of-apple-silicon/ Source: Hacker News Title: Kaspersky finds hardware backdoor in 5 generations of Apple Silicon (2024) Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a significant security concern regarding a hardware backdoor found in Apple’s silicon. Identified as CVE-2023-38606, this vulnerability reportedly affects five generations of Apple mobile CPUs,…

  • Hacker News: U.S. Government Disclosed 39 Zero-Day Vulnerabilities in 2023, First-Ever Report

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.zetter-zeroday.com/u-s-government-disclosed-39-zero-day-vulnerabilities-in-2023-per-first-ever-report/ Source: Hacker News Title: U.S. Government Disclosed 39 Zero-Day Vulnerabilities in 2023, First-Ever Report Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the U.S. government’s disclosure of zero-day vulnerabilities through its Vulnerabilities Equities Process (VEP) in 2023. It highlights a significant shift in the level of transparency around…

  • CSA: How to Address System Vulnerabilities in the Cloud

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/blog/2025/01/30/top-threat-8-patch-protect-prevail-navigating-system-vulnerabilities Source: CSA Title: How to Address System Vulnerabilities in the Cloud Feedly Summary: AI Summary and Description: Yes Summary: This text outlines the eighth top threat from CSA’s Top Threats to Cloud Computing 2024, focusing specifically on System Vulnerabilities. It highlights the major categories of vulnerabilities and their impacts while emphasizing mitigation…

  • The Register: Baguette bandits strike again with ransomware and a side of mockery

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/28/baguettes_bandits_strike_again/ Source: The Register Title: Baguette bandits strike again with ransomware and a side of mockery Feedly Summary: Big-game hunting to the extreme Hellcat, the ransomware crew that infected Schneider Electric and demanded $125,000 in baguettes, has aggressively targeted government, education, energy, and other critical industries since it emerged around mid-2024.… AI Summary…

  • The Register: Apple plugs security hole in its iThings that’s already been exploited in iOS

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/28/apple_cve_2025_24085/ Source: The Register Title: Apple plugs security hole in its iThings that’s already been exploited in iOS Feedly Summary: Cupertino kicks off the year with a zero-day Apple has plugged a security hole in the software at the heart of its iPhones, iPads, Vision Pro goggles, Apple TVs and macOS Sequoia Macs, warning…

  • Hacker News: Hackers get $886,250 for 49 zero-days at Pwn2Own Automotive 2025

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.bleepingcomputer.com/news/security/hackers-get-886-250-for-49-zero-days-at-pwn2own-automotive-2025/ Source: Hacker News Title: Hackers get $886,250 for 49 zero-days at Pwn2Own Automotive 2025 Feedly Summary: Comments AI Summary and Description: Yes Summary: The Pwn2Own Automotive 2025 contest showcased significant advancements in automotive security, where researchers exploited numerous zero-day vulnerabilities in automotive software and electric vehicle systems, highlighting critical security gaps in…

  • The Register: SonicWall flags critical bug likely exploited as zero-day, rolls out hotfix

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/23/sonicwall_critical_bug/ Source: The Register Title: SonicWall flags critical bug likely exploited as zero-day, rolls out hotfix Feedly Summary: Big organizations and governments are main users of these gateways SonicWall is warning customers of a critical vulnerability that was potentially already exploited as a zero-day.… AI Summary and Description: Yes Summary: SonicWall has issued…

  • The Register: FortiGate config leaks: Victims’ email addresses published online

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/23/fortigate_config_leaks_infoseccers_list_victim_emails/ Source: The Register Title: FortiGate config leaks: Victims’ email addresses published online Feedly Summary: Experts warn not to take leaks lightly as years-long compromises could remain undetected Thousands of email addresses included in the Belsen Group’s dump of FortiGate configs last week are now available online, revealing which organizations may have been…