The Hacker News (2 hours ago)
26,400 credentials that developers left in public code on Gitee, a Chinese code-hosting service, still worked when a researcher tested them. Anyone who copied one from that code could have used it.
Read the full story on The Hacker News.
The social networking site is facing criticism for blocking access to the site, which identifies thousands of ICE agents and other employees working for Homeland Security.
The flaws could lead to arbitrary code execution, authorization bypasses, and privilege escalation.
The transparency nonprofit Distributed Denial of Secrets published the archive, which it calls “Icepick,” on Wednesday. It spans DHS and seven of its component agencies, including Immigration and Customs Enforcement and US Customs and Border Protection.
BAE Systems says no data was extracted and no PII was breached in the incident that disrupted US bankruptcy court notices for weeks.
Hackers are gunning for Japan’s ISPs - and this time it’s Sony’s turn.
The personal and work information was allegedly stolen from an Okta single sign-on system earlier this year.
Security teams have spent years trying to detect threats faster. AI is changing the harder part: how much time defenders have left to act.
A flaw in Telegram for Android allowed an attacker to run code on a victim’s phone via a voice call once the victim answered, according to security startup NebuSec. The attacker needed only an ordinary Telegram account.
AI is beginning to take over much of the work that has traditionally defined the security analyst’s job. Investigating alerts, collecting evidence, correlating activity across tools, and executing response actions are becoming tasks that AI systems can perform on their own.
Cisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software that it said has been exploited in the wild.
71 active sources
26 Turkish · 45 English
All sources
