Internet-wide Vulnerability Enables Giant DDoS Attacks Summary Researchers at Tel Aviv University have discovered “MadeYouReset”, an HTTP/2 vulnerability that effectively reintroduces the destructive effect of the 2023 “Rapid Reset” DDoS…
Former Intel Engineer Sentenced for Stealing Trade Secrets for Microsoft Summary Varun Gupta, a former Intel product marketing engineer, admitted downloading roughly 4,000 files containing proprietary information and trade secrets…
Summary Researchers from U.C. San Diego presented results at Black Hat from a large, real-world study of phishing training involving more than 19,000 UCSD Health employees. Over eight months the…
Security Flaws In Carmaker’s Web Portal Let a Hacker Remotely Unlock Cars Summary Security researcher Eaton Zveare (now at Harness) discovered critical flaws in an unnamed major carmaker’s dealer portal…
Android’s pKVM Becomes First Globally Certified Software to Achieve SESIP Level 5 Security Certification Summary Protected KVM (pKVM), the hypervisor used by the Android Virtualization Framework, has been awarded SESIP…
Google’s ‘AI Overview’ Pointed Him to a Customer Service Number. It Was a Scam Summary A real estate developer searching for a cruise company’s customer-service number clicked the phone shown…
Male-Oriented App ‘TeaOnHer’ Also Had Security Flaws That Could Leak Men’s Driver’s License Photos Summary TechCrunch found serious security lapses in TeaOnHer, a recently launched male-oriented app that paralleled the…
How Evolving RATs Are Redefining Enterprise Security Threats Summary Aditya K. Sood explains how modern remote access trojans (RATs) have shifted from noisy, signature-detectable tools to stealthy, persistent threats that…
Phishing Training Is Pretty Pointless, Researchers Find Summary Researchers presenting at Black Hat reported the results of a large, real-world study run by UC San Diego and Censys showing that…
Security Flaws In Carmaker’s Web Portal Let a Hacker Remotely Unlock Cars Summary Security researcher Eaton Zveare (Harness) discovered critical flaws in an unnamed carmaker’s dealer web portal that allowed…
