A single wrong variable on one line in XQUIC, Alibaba’s QUIC and HTTP/3 library, lets any remote client crash the server with a short burst of completely legal traffic. There is no patch. FoxIO researcher Sébastien Féry disclosed the flaw on… Read More "Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers"
These integrations show up in the form of separate commands that the backdoor supports. One command performs raw physical disk wiping by overwriting drives and removing partition metadata. Another borrows from the Crucio ransomware family, encrypting files with randomly generated… Read More "Microsoft uncovers GigaWiper, a backdoor designed for destruction on demand"
Britain’s health service has warned staff that they could face jail time if found guilty of accessing patient data without a legitimate reason. Head of the NHS, Jim Mackey, said inappropriate access of medical records was “wholly unacceptable, a disgraceful… Read More "NHS Warns Staff Over Unauthorized Access to Patient Data"
Researchers from Tel Aviv University, Technion, and Intuit have detailed a new attack technique dubbed ‘HalluSquatting’ that turns AI assistants’ tendency to hallucinate into a scalable infection vector. The cybersecurity community has identified several ways to hack or hijack AI… Read More "‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism"
Security firm Coinspect has disclosed a crypto wallet flaw it calls Ill Bloom, and attackers are already using it. The flaw is in how some wallet software generated its recovery phrase, the words that control the money. When that phrase is made with… Read More "Attackers Exploit ‘Ill Bloom’ Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets"
Among my fellow CISOs, the conversation has shifted. The challenge now is to translate this reality into a business case that resonates with executive leadership and drives investment in remediation capacity. Here are six ways to do this. Treat security… Read More "The business case for burning down security debt: A practical approach for CISOs"
Microsoft has warned customers to expect a surge in the number of security updates they will need to apply to Windows, as it uses cutting-edge AI techniques to find more zero-day vulnerabilities. The tech giant claimed in a blog post… Read More "Microsoft Warns of Increase in Number of Security Updates"
For over eight months, a threat actor has been using a destructive backdoor and wiper that has multiple system-level sabotage capabilities, Microsoft reports. Dubbed GigaWiper, the malware is a sophisticated Go-based backdoor that consists of multiple malware families and robust… Read More "GigaWiper Combines Multiple Malware for System-Level Sabotage"
Three-quarters of organizations have admitted to shipping vulnerable code, as AI risk proliferates in supply chains, according to two new studies out this week. Checkmarx published new data on May 21 showing that 75% of organizations often or sometimes deploy… Read More "Three-Quarters of Firms Knowingly Ship Vulnerable Code, Says Checkmarx"
A threat actor has built a network of over 200 GitHub repositories that have been delivering Windows malware, supply chain protection provider Socket reports. Dubbed Operation Muck and Load, the campaign involves 222 lure repositories across 190 accounts that contain… Read More "Network of 200 GitHub Repositories Used for Malware Infection"
