⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Microsoft warns that a Russian threat group is abusing hotel and conference Wi-Fi networks in a campaign called CaptiveCrunch. Attackers manipulate captive portals to steal logins, deliver malware, or perform machine-in-the-middle attacks.
Threat actors are increasingly using legitimate cloud services to host phishing pages and evade detection. This analysis covers how platforms like Cloudflare Workers and Vercel are abused for adversary-in-the-middle attacks and provides statistics on commonly abused domains.
A hard-coded cryptographic key vulnerability in Acrisure KARR BT and DR-100 automotive anti-theft systems allows attackers within Bluetooth range to issue unauthorized commands. This could enable door unlocking and engine immobilization.
The NCSC's Chief Technology Officer, Ollie Whitehouse, released a statement on AI security after recent incidents related to frontier AI evaluations. The statement emphasizes the importance of addressing security risks in advanced AI systems.
A hard-coded cryptographic key vulnerability in Acrisure KARR BT and DR-100 automotive anti-theft systems allows attackers within Bluetooth range to issue unauthorized commands. This could enable door unlocking and engine immobilization.
A vulnerability in Thermo Fisher Applied Biosystems Genetic Analyzers allows attackers to modify .fsa/.hid output files due to a missing integrity check. This tampering can alter DNA data, leading to inaccurate test results.