Cloud Security Alliance News Clipping Site

Tag: exploit

  • Slashdot: Researchers Discover Flaws In 5 End-to-End Encrypted Cloud Services

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/24/10/26/1833203/researchers-discover-flaws-in-5-end-to-end-encrypted-cloud-services?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Researchers Discover Flaws In 5 End-to-End Encrypted Cloud Services Feedly Summary: AI Summary and Description: Yes Summary: Researchers from ETH Zurich have uncovered significant cryptographic flaws in several major end-to-end encrypted cloud storage services, compromising their intended confidentiality and security. The findings highlight the vulnerabilities in commonly used services…

  • Hacker News: New Windows Driver Signature bypass allows kernel rootkit installs

    —

    by

    system automation
    in

    Source URL: https://www.bleepingcomputer.com/news/security/new-windows-driver-signature-bypass-allows-kernel-rootkit-installs/ Source: Hacker News Title: New Windows Driver Signature bypass allows kernel rootkit installs Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a vulnerability in Windows kernel security that allows attackers to downgrade kernel components, circumventing security measures like Driver Signature Enforcement (DSE). Despite the advancements in kernel security,…

  • Hacker News: SELinux Bypasses

    —

    by

    system automation
    in

    Source URL: https://klecko.github.io/posts/selinux-bypasses/ Source: Hacker News Title: SELinux Bypasses Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text provides an in-depth technical exploration of SELinux, specifically relating to its implementation, security mechanisms, and potential bypass methods on Android devices. This is significant for professionals in security and compliance who are focused on kernel-level…

  • Hacker News: A deep dive into Linux’s new mseal syscall

    —

    by

    system automation
    in

    Source URL: https://blog.trailofbits.com/2024/10/25/a-deep-dive-into-linuxs-new-mseal-syscall/ Source: Hacker News Title: A deep dive into Linux’s new mseal syscall Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the introduction of a new syscall called `mseal` in the Linux kernel that implements a memory sealing protection mechanism. It highlights how `mseal` differs from previous memory protection…

  • The Register: Just how private is Apple’s Private Cloud Compute? You can test it to find out

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/10/25/apple_private_cloud_compute/ Source: The Register Title: Just how private is Apple’s Private Cloud Compute? You can test it to find out Feedly Summary: Also updates bug bounty program with $1M payout In June, Apple used its Worldwide Developer Conference to announce the creation of the Private Cloud Compute platform to run its AI Intelligence…

  • Hacker News: UnitedHealth says data of 100M stolen in Change Healthcare hack

    —

    by

    system automation
    in

    Source URL: https://www.bleepingcomputer.com/news/security/unitedhealth-says-data-of-100-million-stolen-in-change-healthcare-hack/ Source: Hacker News Title: UnitedHealth says data of 100M stolen in Change Healthcare hack Feedly Summary: Comments AI Summary and Description: Yes Summary: The Change Healthcare ransomware attack represents one of the largest healthcare data breaches in recent years, affecting over 100 million individuals. Sensitive personal and medical information was compromised, resulting…

  • Simon Willison’s Weblog: ZombAIs: From Prompt Injection to C2 with Claude Computer Use

    —

    by

    system automation
    in

    Source URL: https://simonwillison.net/2024/Oct/25/zombais/ Source: Simon Willison’s Weblog Title: ZombAIs: From Prompt Injection to C2 with Claude Computer Use Feedly Summary: ZombAIs: From Prompt Injection to C2 with Claude Computer Use In news that should surprise nobody who has been paying attention, Johann Rehberger has demonstrated a prompt injection attack against the new Claude Computer Use…

  • Embrace The Red: ZombAIs: From Prompt Injection to C2 with Claude Computer Use

    —

    by

    system automation
    in

    Source URL: https://embracethered.com/blog/posts/2024/claude-computer-use-c2-the-zombais-are-coming/ Source: Embrace The Red Title: ZombAIs: From Prompt Injection to C2 with Claude Computer Use Feedly Summary: A few days ago, Anthropic released Claude Computer Use, which is a model + code that allows Claude to control a computer. It takes screenshots to make decisions, can run bash commands and so forth.…

  • Hacker News: When Samsung meets MediaTek: the story of a small bug chain [pdf]

    —

    by

    system automation
    in

    Source URL: https://www.sstic.org/media/SSTIC2024/SSTIC-actes/when_vendor1_meets_vendor2_the_story_of_a_small_bu/SSTIC2024-Article-when_vendor1_meets_vendor2_the_story_of_a_small_bug_chain-rossi-bellom_neveu.pdf Source: Hacker News Title: When Samsung meets MediaTek: the story of a small bug chain [pdf] Feedly Summary: Comments AI Summary and Description: Yes Summary: The text details a significant security vulnerability found in the boot chain of Samsung mobile devices using MediaTek System-on-Chips. The vulnerability, which can allow an attacker with…

  • The Register: AWS Cloud Development Kit flaw exposed accounts to full takeover

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/10/24/aws_cloud_development_kit_flaw/ Source: The Register Title: AWS Cloud Development Kit flaw exposed accounts to full takeover Feedly Summary: Remember Bucket Monopoly? Yeah, there’s more Amazon Web Services has fixed a flaw in its open source Cloud Development Kit (CDK) that, under the right conditions, could allow an attacker to completely hijack an account.… AI…