Cloud Security Alliance News Clipping Site

Tag: bypass

  • Krebs on Security: FBI: Spike in Hacked Police Emails, Fake Subpoenas

    —

    by

    system automation
    in

    Source URL: https://krebsonsecurity.com/2024/11/fbi-spike-in-hacked-police-emails-fake-subpoenas/ Source: Krebs on Security Title: FBI: Spike in Hacked Police Emails, Fake Subpoenas Feedly Summary: The Federal Bureau of Investigation (FBI) is urging police departments and governments worldwide to beef up security around their email systems, citing a recent increase in cybercriminal services that use hacked police email accounts to send unauthorized…

  • Hacker News: Windows Process Injection

    —

    by

    system automation
    in

    Source URL: https://www.outflank.nl/blog/2024/10/15/introducing-early-cascade-injection-from-windows-process-creation-to-stealthy-injection/ Source: Hacker News Title: Windows Process Injection Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text introduces a novel process injection technique dubbed Early Cascade Injection, which enhances existing methods by executing more stealthily against Endpoint Detection and Response (EDR) systems. The author provides a detailed technical analysis of Windows…

  • Hacker News: A New Era of macOS Sandbox Escapes: Overlooked Attack Surface, 10+ New Vulns

    —

    by

    system automation
    in

    Source URL: https://jhftss.github.io/A-New-Era-of-macOS-Sandbox-Escapes/ Source: Hacker News Title: A New Era of macOS Sandbox Escapes: Overlooked Attack Surface, 10+ New Vulns Feedly Summary: Comments AI Summary and Description: Yes Summary: The blog post discusses a series of novel sandbox escape vulnerabilities discovered in macOS, including various CVEs that expose how remote code execution (RCE) within a…

  • Hacker News: Police Freak Out at iPhones Mysteriously Rebooting Themselves, Locking Cops Out

    —

    by

    system automation
    in

    Source URL: https://www.404media.co/police-freak-out-at-iphones-mysteriously-rebooting-themselves-locking-cops-out/ Source: Hacker News Title: Police Freak Out at iPhones Mysteriously Rebooting Themselves, Locking Cops Out Feedly Summary: Comments AI Summary and Description: Yes Summary: Law enforcement officials are raising concerns about a potential new security feature in iOS 18 that causes iPhones to reboot when disconnected from cellular networks, complicating forensic investigations.…

  • The Register: Criminals open DocuSign’s Envelope API to make BEC special delivery

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/05/docusigns_envelope_bec/ Source: The Register Title: Criminals open DocuSign’s Envelope API to make BEC special delivery Feedly Summary: Why? Because that’s where the money is Business email compromise scammers are trying to up their success rate by using a DocuSign API.… AI Summary and Description: Yes Summary: The text discusses a rise in business…

  • Bulletins: Vulnerability Summary for the Week of October 28, 2024

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/bulletins/sb24-309 Source: Bulletins Title: Vulnerability Summary for the Week of October 28, 2024 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info Patch Info acnoo — flutter_api  Authentication Bypass Using an Alternate Path or Channel vulnerability in Acnoo Acnoo Flutter API allows Authentication Bypass.This issue affects Acnoo Flutter API:…

  • Alerts: CISA Adds Two Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/04/cisa-adds-two-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Two Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-8957 PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability CVE-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability These types of vulnerabilities are frequent attack vectors…

  • The Register: Why the long name? Okta discloses auth bypass bug affecting 52-character usernames

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/04/why_the_long_name_okta/ Source: The Register Title: Why the long name? Okta discloses auth bypass bug affecting 52-character usernames Feedly Summary: Mondays are for checking months of logs, apparently, if MFA’s not enabled In potentially bad news for those with long names and/or employers with verbose domain names, Okta spotted a security hole that could…

  • Slashdot: Is AI-Driven 0-Day Detection Here?

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/24/11/02/2150233/is-ai-driven-0-day-detection-here?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Is AI-Driven 0-Day Detection Here? Feedly Summary: AI Summary and Description: Yes Summary: This text discusses the advancements in AI-driven vulnerability detection, particularly focusing on the implementation of LLM-powered methodologies that have proven effective in identifying critical zero-day vulnerabilities. The approach combines deep program analysis with adversarial AI agents,…

  • Slashdot: Okta Fixes Login Bypass Flaw Tied To Lengthy Usernames

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/24/11/02/0113243/okta-fixes-login-bypass-flaw-tied-to-lengthy-usernames?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Okta Fixes Login Bypass Flaw Tied To Lengthy Usernames Feedly Summary: AI Summary and Description: Yes Summary: Okta has addressed a significant authentication bypass vulnerability that impacted its AD/LDAP delegated authentication service. The patch was implemented after an issue was discovered due to an algorithmic flaw that stored cached…