The Hacker News (3 hours ago)
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups.
Read the full story on The Hacker News.
Noyb files five complaints in four member states over alleged tracking of workers on Scale AI’s Outlier platform
Kingdom Come Deliverance 2 developers Warhorse, who’re also working on a Lord of the Rings RPG, have revealed that they’ve been targeted by a cyberattack aiming to access their systems and data.
Kingdom Come: Deliverance developer Warhorse Studios has confirmed it’s suffered a “serious” cyberattack, saying it is currently working to determine the “full extent” of its impact.
The malware’s focus on AI tools expands the traditional infostealer playbook to expose a forest of AI sessions, sensitive business data, and developer infrastructure from a single compromised endpoint.
‘Kingdom Come: Deliverance’ developer Warhorse Studios confirmed it was the victim of a major cyberattack.
Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project’s infrastructure.
Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices.
Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim’s work account.
An attacker who gained access to Keystone’s website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement on October 26. Someone with that key could build counterfeit devices that pass the online check owners use to verify a Keystone.
Fake login pages are nothing new, but generative AI is making them easier to build and more convincing. Attackers can recreate familiar login screens, impersonate trusted brands and tailor phishing attempts to specific employees or organizations. Some fake login pages go beyond stealing passwords.
The Guardian Technology
71 active sources
26 Turkish · 45 English
All sources
