The Hacker News (1 hour ago)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a high-severity security flaw impacting UnrealIRCd, an open-source Internet Relay Chat (IRC) server, to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation.
Read the full story on The Hacker News.
Fully automated ransomware hasn’t arrived—yet. But seemingly unsophisticated attackers are using AI tools to wreak havoc.
Ride-hailing company Uber has disclosed a data breach that affected the information of thousands of its drivers. Based on filings, the attack was made possible through a service provider.
Officials say there is no evidence of a cyberattack behind the nationwide FAA outage, which may have been caused by a software update.
The FAA called a ground stop on all US flights, which means no planes are taking off, and many are landing. There’s no indication of a cyberattack, but the telecommunications system between air traffic control and pilots is not functioning at full capacity.
Hackers broke into an AI startup used by Uber and made off with thousands of drivers’ personal information. Notion was caught up in the breach, too.
Climate change is the issue. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server. Updates released yesterday fix it, along with 51 other security flaws. Full protection from this flaw also requires rebuilding any C-language extensions installed on the server.
Two attacks made public this week allow a malicious host to read data inside AMD SEV-SNP-protected virtual machines (VMs), which are built to keep the server’s operator out. One of them, Mior, can also modify a VM’s memory and fake the signed report confirming which software it runs.
The U.S. Federal Bureau of Investigation (FBI) has established that threat actors tied to the Democratic People’s Republic of Korea (DPRK aka North Korea) have stolen more than $400 million worth of cryptocurrency as part of a social engineering scheme codenamed FaceStealer in the last 18 months.
Three Trezor Safe 5 wallets bought from the reseller CryptoBilis contain an implant, an extra circuit board that can copy their recovery phrases, hardware wallet maker Trezor said yesterday.
The Guardian Technology
65 active sources
20 Turkish · 45 English
All sources
