Why metaphor may dictate your security strategy
In this week's newsletter, Martin looks at how the metaphors we use to describe AI "escaping" its sandbox can completely change how we react to the threat.
Kaynakta oku
Siber Güvenlik Haberleri
Güvenilir yayınlardan canlı haberler, DayBreach CVE verileriyle eşleştirilmiş olarak.
Tüm kaynaklarArs Technica · 64BleepingComputer · 165CERT Polska · 78Cisco Talos · 46CrowdStrike · 32Dark Reading · 69DataBreaches.net · 29Krebs on Security · 13Microsoft Security Blog · 38Proofpoint · 37Rapid7 · 68SANS Internet Storm Center · 55Security.NL · 307SecurityWeek · 67SentinelOne · 33The Cyber Express · 70TheCyberThrone · 56The Hacker News · 291The Record · 39Unit 42 · 46
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted guests. The flaw is tracked as CVE-2026-64561 and affects KVM/x86's shadow memory management unit (MMU), which manages shadow page
Kaynakta oku
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs
Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst SD-WAN and IOS XE Software as part of a comprehensive internal security review. The security issues affect Cisco Catalyst SD-WAN Software, regardless of device configuration, and Cisco IOS XE Software when it is running in autonomous or controller mode. "These vulnerabilities were found
Kaynakta oku
New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs
An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the predictor after the defense has run. MIT CSAIL researchers Daniël Trujillo and Mengjia Yan named the technique INTERRUPT INJECTION. On an AMD Zen 2 machine running Linux 6.14 with every default Spectre v2 mitigation on,
Kaynakta oku
ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories
Apparently, opening the thing is now enough. A repo can run before the first prompt, a package can hide among hundreds, and a harmless-looking PDF can finish the job. This week runs on cheap leverage: exposed servers, recycled bugs, poisoned agent instructions, remote-access tools dressed as support software, and trusted defaults doing attackers a favor. Nothing here is especially mystical.
Kaynakta oku
Routerfabrikant Zbtlink ontkent aanwezigheid van backdoor, staakt verkoop
De Chinese routerfabrikant Zbtlink ontkent dat allerlei routermodellen een backdoor bevatten, zoals cybersecuritybedrijf ...
Kaynakta oku
Eigenaren Coldcard-wallet na grote bitcoinroof nu doelwit van phishingaanval
Eigenaren van een Coldcard-wallet zijn na de grote bitcoinroof van eerder deze week nu het doelwit van phishingaanval waarbij ...
Kaynakta oku
Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its August 3 scan counted 4,407 exposed Rockwell controllers worldwide, including 2,844 in the United States, but Forescout could not confirm any were compromised. That figure counts exposed
Kaynakta oku
ING meldt ook incident bij logistiek partner: 'Mogelijk klantgegevens gestolen'
ING waarschuwt klanten, net zoals de Bijenkorf en bol, voor een cyberincident bij een logistiek partner. Het bedrijf in kwestie ...
Kaynakta oku
CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps
Coinspect has identified CryptoJS.lib.WordArray.random() as the weak random number generator behind the Ill Bloom wallet drains. Introduced in the JavaScript cryptography library 12 years ago, the function supplied weak entropy that affected wallet apps used to generate recovery phrases. Coinspect's on-chain analysis puts the measured theft across two sweeps since late May at a lower bound of
Kaynakta oku
981-990 / 1390 haber gösteriliyor