The Hacker News (1 hour ago)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added four security flaws impacting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
Read the full story on The Hacker News.
France summoned the Iranian ambassador and said it would seek European sanctions against those responsible for the attack
A researcher’s trawl through publicly available code found private information was at risk across multiple departments.
Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild.
N-able said it has taken N-central Hosted Environments offline and is urging on-premises customers to shut down their servers until further notice following the public disclosure of over 30 vulnerabilities collectively tracked as Able2Shell.
The high-severity use-after-free in Chrome’s XML component was reported anonymously on November 6 and is already exploited in attacks.
Huang, who is now being investigated over an affair with an alleged Chinese spy, is far more important to the future of the world order than other tech bosses.
An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today. The attacker used credentials for an AWS account that Qubole’s platform uses to reach those customers.
Attackers used the Ethersphere project’s own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage network: bee-js 13.3.0 and Swarm Desktop 0.56.2.
The South Asian cyber espionage group known as Bitter (aka APT-C-08, APT-Q-37, Hazy Tiger, Orange Yali, T-APT-17, and TA397) has been observed targeting South Asian organizations with a previously unreported remote access trojan called PapRAT.
A system doesn’t always need a complicated bug to let someone in. Sometimes, a blank password is enough. That’s one of the bigger stories this week. And it gets worse when the tools meant to keep systems updated or running safely become part of the attack.
65 active sources
20 Turkish · 45 English
All sources
