Ricercatori di VUSec (Vrije Universiteit Amsterdam) e della Scuola Superiore Sant’Anna di Pisa hanno reso pubblica Branch Target Reuse, una variante di Spectre-v2 che sfrutta predizioni di salto obsolete nei motori JIT. Sul kernel Linux l’attacco ha estratto l’hash della password di root da una CPU Intel moderna, aggirando le mitigazioni attive prima della correzione ..
Categoria : Security
Approximately 17.3 trillion stored rows within several Microsoft datasets were found to be accessible via an internal analytics service, simply because it didn’t verify the signature on a login token. This vulnerability, discovered by 16-year-old security researcher Faav, could allow users to claim an administrator’s identity, submitting unauthorized SQL queries without real credentials. Ensar Seker, CISO ..
After Russets Care Home experienced what BBC calls a “mystery death” of a resident, the facility is instating greater security measures. A little over a year ago, Sandra Moon, 65, passed away after falling down a flight of stairs. The coroner suggested it was unlikely that Moon could’ve fallen down the staircase on her own, considering ..
The company emerged from stealth mode with pre-seed funding from Osage University Partners and DataTribe. The post RemoteThreat Launches With $7 Million for Offensive Operations Platform appeared first on SecurityWeek. https://www.securityweek.com/remotethreat-launches-with-7-million-for-offensive-operations..
The company will use the funds to expand its sales, partnerships, channels, and customer support teams. The post Reco Raises $55 Million for Agentic Security appeared first on SecurityWeek. https://www.securityweek.com/reco-raises-55-million-for-agentic..
The personalized versions of ChatGPT were used to impersonate legitimate products and trick users into executing PowerShell commands. The post Hackers Use ChatGPT Custom GPTs in ClickFix Attacks appeared first on SecurityWeek. https://www.securityweek.com/hackers-use-chatgpt-custom-gpts-in-clickfi..
The data breach affects the Defense Manpower Data Center (DMDC), which maintains personnel records for the Department of Defense. The post Pentagon Personnel Agency Data Breach Impacts 3 Million People appeared first on SecurityWeek. https://www.securityweek.com/pentagon-personnel-agency-data-breach-impacts-3-milli..
Rig provides an identity dependencies graph to distinguish between legitimate users and rogue AI agents The post Rig Security Emerges From Stealth With $12M to Tackle Agentic AI Identity Risks appeared first on SecurityWeek. https://www.securityweek.com/rig-security-emerges-from-stealth-with-12m-to-tackle-agentic-ai-ident..
– AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations. The post Four Cyber Threats Harboring Big Plans for the Future appeared first on SecurityWeek. https://www.securityweek.com/four-cyber-threats-harboring-big-plans-for-t..
The GPT-6.1 Astra model was slated to debut in ChatGPT and Codex in October, but it fell short of expectations. The post OpenAI Calls Off GPT-6.1 Astra Launch, Details Safety Cases for Frontier Training appeared first on SecurityWeek. https://www.securityweek.com/openai-calls-off-gpt-6-1-astra-launch-details-safety-cases-for-frontier..
