> TODAY'S SUMMARY (83 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, the FBI and CISA issued warnings regarding cyberattacks targeting industrial refrigeration systems, which could lead to severe consequences for food and medical supplies. OpenSSH has revealed a significant flaw that allows remote attackers to bypass authentication on certain Linux systems, while a breach at Chainalysis exposed sensitive credentials for all its customers. Additionally, CEO impersonation scams utilizing AI have resulted in over $100 million in losses, emphasizing the growing sophistication of cybercriminal tactics. In response to these threats, organizations are urged to enhance their security measures, particularly around password management and vulnerability patching.
|
// AI-powered summary generated at 16:00
It was discovered that HTTP-Date incorrectly handled parsing certain date
strings. An attacker could possibly use this issue to cause HTTP-Date to
use excessive resources, leading to a denial of service.
It was discovered that rsyslog incorrectly handled regex-based TCP framing
in the imptcp module. A remote attacker could possibly use this issue to
cause rsyslog to crash, resulting in a denial of service.
It was discovered that rsyslog incorrectly handled oversized RFC5424
structured data in the m...
You can't have failed to hear the news headlines about "rogue" OpenAI models hacking into another AI organisation, Hugging Face.
But what has actually happened, who is to blame, and is it as serious as some of the reports suggest?
Find out in my article on the Hot for Security blog.
Understand document version control and revision control to keep business files secure, auditable, and recoverable.
Unit 42 details a Russian cyberespionage campaign targeting Zimbra webmail servers using JavaScript injection to steal credentials.
The post Russian Global Webmail Espionage appeared first on Unit 42.
CoreView research finds that security leadership is concerned about AI Assistant exposing confidential data
FedRAMP 20X replaces point-in-time assessments with continuous, machine-readable evidence that demonstrates security controls are working. Anecdotes explains what the transition from Rev5 to FedRAMP 20X means and how organizations can prepare for continuous, evidence-based assurance. [...]
Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
The latest investment round brings the total raised by Abstract to nearly $50 million.
The post Abstract Raises $25 Million to Expand Composable Security Operations Platform appeared first on SecurityWeek.
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.
Two disclosures, five days apart, described the same intrusion from opposite ends —
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.
Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.
US government agencies have warned that Iranian cyber actors are targeting US-based Siemens and Schneider industrial equipment
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
Cybersecurity researchers have uncovered a sandbox escape vulnerability in Anthropic's Claude Cowork that makes it possible to break out of the confines of a Linux virtual machine (VM) within which the agent runs to read or write files anywhere on the Mac.
Accomplish AI, which shared details of the...
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.