Collaborate Disseminate
On GitHub, [AyaanB] details buying a cheap Android TV streaming device, looking for, and finding, baked-in malware. Multiple warnings have been issued by the FBI and CISA regarding malware on …read more Continue reading This Week in Security: Android Malware, VOIP Hijack, Signal Contact Discovery, and TeamPCP Arrests
On GitHub, [AyaanB] details buying a cheap Android TV streaming device, looking for, and finding, baked-in malware. Multiple warnings have been issued by the FBI and CISA regarding malware on …read more Continue reading This Week in Security: Android Malware, VOIP Hijack, Signal Contact Discovery, and TeamPCP Arrests
Apple has started sending some users push notifications warning that they have been targeted with specific malware. No specific information about the threat Apple detected is available. While multiple iOS …read more Continue reading This Week in Security: Apple Warns Users, Stripe Merchants Leak Keys, Copilot Helps Hack Itself, and Comcast Senses Movement
After a multi-year hiatus, the venerable BugTraq mailing list is back! For decades, BugTraq was the place where vulnerabilities were disclosed, from the early days when nearly all vendors viewed …read more Continue reading This Week in Security: BugTraq, AI Hacks, and Being Dumb On Planes
kMaybe feeling left out from the questionable hype train of “Our AI models can’t be trusted”, Anthropic has released reports that their Claude model has “reached the Internet” and accessed …read more Continue reading This Week in Security: Claude Gets Hacking, Hotel WiFi, and NPM Compromised Again
The great thing about standards is there’s so many to pick from, right?. (Insert obligatory XKCD #927 here.) Several companies have developed naming schemes to refer to groups of attacks, …read more Continue reading This Week in Security: What’s in a name, the AI Bugpocalypse Hits Everyone, OpenWRT flaws, and Duress Passwords
[Ayush Paul] posts about extracting data from Claude agents while it accesses web data to fulfill user requests. But it wasn’t that easy. [Ayush] discovered that Anthropic anticipated many of …read more Continue reading This Week in Security: AI is a Mess, Hacking Car Chargers, an OpenSSL DoS, and Factories Under Attack
Following the reports last week using the Windows Global Device ID (GDID) in tracking a malware operators behavior, here is a comprehensive write-up about what goes into the GDID and …read more Continue reading This Week in Security: Another Record Patch Tuesday, LAME is More Secure, Secure Boot is Less Secure, and Milk Malware
The Januscape vulnerability allows a user in a guest VM managed by the Linux Kernel Virtual Machine (KVM) to corrupt memory in the host system and break out of isolation. …read more Continue reading This Week in Security: Escaping Linux VMs, Vulnerable Solar, Confusing AI (Again), and Confusing NPM Malware
Unsurprisingly to many of us, app stores for smart televisions are also trash. Perhaps even more full of trash than other app stores due to the smaller ecosystem and fewer …read more Continue reading This Week in Security: Windows 10 Gets Another Year, SmartTV Botnets, Hiding Payloads, and LastPass Customer Leak