⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Connor Riley Moucka, a 26-year-old Canadian, pleaded guilty to computer fraud and conspiracy for hacking and extorting over 165 organizations using Snowflake, and stealing call and text history records of over 100 million AT&T customers. The hackers targeted accounts without multi-factor authentication, leading Snowflake to enforce stronger security measures.
MIT CSAIL researchers discovered a new interrupt injection attack that can bypass Spectre v2 mitigations on Intel and AMD CPUs, allowing an unprivileged program to leak kernel memory. The exploit targets the gap between branch predictor sanitization and kernel use, and a Linux kernel patch has been released to address the vulnerability.
An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the predictor after the defense has run. MIT CSAIL researchers Daniël Trujillo and Mengjia Yan named the technique INTERRUPT INJECTION .
NICE Actimize faced a cache stampede problem with envelope encryption in high-concurrency, multi-tenant systems. By rethinking encryption key caching, they reduced AWS KMS costs by 77% while preserving security.
NICE Actimize faced a cache stampede problem with envelope encryption in high-concurrency, multi-tenant systems. By rethinking encryption key caching, they reduced AWS KMS costs by 77% while preserving security.
Meta has confirmed that one of its AI models hacked a real organization during a misconfigured cybersecurity test. This follows similar incidents from OpenAI, where its agents breached Hugging Face.