Tag: attackers

Source URL: https://abnormalsecurity.com/blog/data-reveals-350-percent-increase-in-file-sharing-phishing Source: CSA Title: File-Sharing Phishing on the Rise: Insights from 2024 Report Feedly Summary: AI Summary and Description: Yes **Summary:** The text discusses the alarming rise of file-sharing phishing attacks, which have increased by 350% over the past year, highlighting the evolving tactics of cybercriminals in utilizing genuine services to mislead recipients.…

Slashdot: Microsoft’s Honeypots Lure Phishers at Scale – to Spy on Them and Waste Their Time

Oct 20, 2024

—

by

Source URL: https://it.slashdot.org/story/24/10/20/1840217/microsofts-honeypots-lure-phishers-at-scale—to-spy-on-them-and-waste-their-time?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Microsoft’s Honeypots Lure Phishers at Scale – to Spy on Them and Waste Their Time Feedly Summary: AI Summary and Description: Yes Summary: The text discusses an innovative approach by Microsoft to combat phishing using the Azure cloud platform, featuring the use of high-interaction honeypots to gather threat intelligence…

Hacker News: Internet Archive breached again through stolen access tokens

Oct 20, 2024

—

by

Source URL: https://www.bleepingcomputer.com/news/security/internet-archive-breached-again-through-stolen-access-tokens/ Source: Hacker News Title: Internet Archive breached again through stolen access tokens Feedly Summary: Comments AI Summary and Description: Yes Summary: The Internet Archive suffered a significant data breach resulting from poor security practices, specifically the failure to rotate stolen GitLab authentication tokens. This breach has exposed sensitive data, including access to…

Microsoft Security Blog: Escalating cyber threats demand stronger global defense and cooperation

—

by

Source URL: https://blogs.microsoft.com/on-the-issues/2024/10/15/escalating-cyber-threats-demand-stronger-global-defense-and-cooperation/ Source: Microsoft Security Blog Title: Escalating cyber threats demand stronger global defense and cooperation Feedly Summary: We must find a way to stem the tide of this malicious cyber activity. That includes continuing to harden our digital domains to protect our networks, data, and people at all levels. However, this challenge will…

Microsoft Security Blog: New macOS vulnerability, “HM Surf”, could lead to unauthorized data access

—

by

Source URL: https://www.microsoft.com/en-us/security/blog/2024/10/17/new-macos-vulnerability-hm-surf-could-lead-to-unauthorized-data-access/ Source: Microsoft Security Blog Title: New macOS vulnerability, “HM Surf”, could lead to unauthorized data access Feedly Summary: Microsoft Threat Intelligence uncovered a macOS vulnerability that could potentially allow an attacker to bypass the operating system’s Transparency, Consent, and Control (TCC) technology and gain unauthorized access to a user’s protected data. The…

Slashdot: Spectre Flaws Still Haunt Intel, AMD as Researchers Found Fresh Attack Method

—

by

Source URL: https://hardware.slashdot.org/story/24/10/19/0619245/spectre-flaws-still-haunt-intel-amd-as-researchers-found-fresh-attack-method?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Spectre Flaws Still Haunt Intel, AMD as Researchers Found Fresh Attack Method Feedly Summary: AI Summary and Description: Yes Summary: The newly disclosed cross-process Spectre attack exposes persistent flaws in Intel and AMD processors, hindering full mitigation efforts six years after the vulnerabilities’ original report. Researchers from ETH Zurich…

Hacker News: Cross-Process Spectre Exploitation

—

by

Source URL: https://grsecurity.net/cross_process_spectre_exploitation Source: Hacker News Title: Cross-Process Spectre Exploitation Feedly Summary: Comments AI Summary and Description: Yes **Summary**: This detailed text discusses a newly developed cross-process Spectre attack exploiting vulnerabilities in Intel processors, specifically involving the Indirect Branch Prediction Barrier (IBPB). The attack showcases how certain exploit methodologies can retain unauthorized data through microcode…

The Register: Jetpack fixes 8-year-old flaw affecting millions of WordPress sites

Oct 18, 2024

—

by

Source URL: https://www.theregister.com/2024/10/18/jetpack_patches_wordpress_vulnerability/ Source: The Register Title: Jetpack fixes 8-year-old flaw affecting millions of WordPress sites Feedly Summary: Also, new EU cyber reporting rules are live, exploiters hit the gas pedal, free PDNS for UK schools, and more in brief A critical security update for the near-ubiquitous WordPress plugin Jetpack was released last week. Site…

The Register: Spectre flaws continue to haunt Intel and AMD as researchers find fresh attack method

Oct 18, 2024

—

by