Tag: exploit

Source URL: https://mobile.slashdot.org/story/24/11/22/2331247/russian-spies-jumped-from-one-network-to-another-via-wi-fi?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Russian Spies Jumped From One Network To Another Via Wi-Fi Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a significant cybersecurity breach investigated by Veloxity, detailing how Russian hackers were able to daisy-chain multiple Wi-Fi networks to conduct sophisticated intrusions. This case study illustrates the evolving…

The Register: 1000s of Palo Alto Networks firewalls hijacked as miscreants exploit critical hole

—

by

Source URL: https://www.theregister.com/2024/11/22/palo_alto_firewalls_under_exploit/ Source: The Register Title: 1000s of Palo Alto Networks firewalls hijacked as miscreants exploit critical hole Feedly Summary: PAN-PAN! Intruders inject web shell backdoors, crypto-coin miners, more Thousands of Palo Alto Networks firewalls were compromised by attackers exploiting two recently patched security bugs. The intruders were able to deploy web-accessible backdoors to…

Wired: Russian Spies Jumped From One Network to Another Via Wi-Fi in an Unprecedented Hack

—

by

Source URL: https://www.wired.com/story/russia-gru-apt28-wifi-daisy-chain-breach/ Source: Wired Title: Russian Spies Jumped From One Network to Another Via Wi-Fi in an Unprecedented Hack Feedly Summary: In a first, Russia’s APT28 hacking group appears to have remotely breached the Wi-Fi of an espionage target by hijacking a laptop in another building across the street. AI Summary and Description: Yes…

The Register: SafePay ransomware gang claims Microlise attack that disrupted prison van tracking

—

by

Source URL: https://www.theregister.com/2024/11/22/safepay_microlise/ Source: The Register Title: SafePay ransomware gang claims Microlise attack that disrupted prison van tracking Feedly Summary: Fledgling band of crooks says it stole 1.2 TB of data The new SafePay ransomware gang has claimed responsibility for the attack on UK telematics biz Microlise, giving the company less than 24 hours to…

The Register: Here’s what happens if you don’t layer network security – or remove unused web shells

—

by

Source URL: https://www.theregister.com/2024/11/22/cisa_red_team_exercise/ Source: The Register Title: Here’s what happens if you don’t layer network security – or remove unused web shells Feedly Summary: TL;DR: Attackers will break in and pwn you, as a US government red team demonstrated The US Cybersecurity and Infrastructure Agency often breaks into critical organizations’ networks – with their permission,…

Krebs on Security: Feds Charge Five Men in ‘Scattered Spider’ Roundup

—

by

Source URL: https://krebsonsecurity.com/2024/11/feds-charge-five-men-in-scattered-spider-roundup/ Source: Krebs on Security Title: Feds Charge Five Men in ‘Scattered Spider’ Roundup Feedly Summary: Federal prosecutors in Los Angeles this week unsealed criminal charges against five men alleged to be members of a hacking group responsible for dozens of cyber intrusions at major U.S. technology companies between 2021 and 2023, including…

Hacker News: Listen to the whispers: web timing attacks that work

—

by

Source URL: https://portswigger.net/research/listen-to-the-whispers-web-timing-attacks-that-actually-work Source: Hacker News Title: Listen to the whispers: web timing attacks that work Feedly Summary: Comments AI Summary and Description: Yes **Summary:** This text introduces novel web timing attack techniques capable of breaching server security by exposing hidden vulnerabilities, misconfigurations, and attack surfaces more effectively than previous methods. It emphasizes the practical…

Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

—

by

Source URL: https://www.cisa.gov/news-events/alerts/2024/11/21/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability…

Hacker News: Child safety org launches AI model trained on real child sex abuse images

—

by