Aggregated from vendor advisories, security research, and industry publications.
An independent malware researcher has documented a previously unreported Windows backdoor, dubbed SLEEPWALKER, that stays inert in memory until a specifically crafted network packet reaches the machine and then runs commands written in a 23-instruction language of its own design. The sample is an unsigned 64-bit Windows dynamic-link library (DLL) of 59,904 bytes, built to be side-loaded into&
Nutex Health has informed the SEC that it recently detected unauthorized access and data exfiltration. The post Sensitive Information Exposed in Nutex Health Data Breach appeared f…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gite…
Cybersecurity researchers have disclosed details of a phishing-as-a-service (PhaaS) platform built to strip Apple's Activation Lock from stolen devices, using rented AI voice agent…
A space station by 2035 is ISRO’s new mission
CVE-2026-60004 is a remote code execution vulnerability patched by Gitea developers in late July with the release of version 1.27.1. The post CISA Warns of Exploited Gitea Vulnerab…
Oh great, Big Tech is now in prime position to decide which messages get through
Amid talk of an Nvidia deal, the AI search biz is looking beyond the cloud
Delayed, flawed, yet still beautiful
Cisco is partnering with Supermicro to bring the server vendor’s liquid- and air-cooled systems into Cisco’s AI infrastructure portfolio. Specifically, Cisco will begin offering hi…
The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information. [...]
Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites. [...]
With some simple HTML that's invisible to users, attackers can manipulate AI-powered email summarizers into producing malicious information.
Article URL: https://sethmlarson.dev/when-str-lower-is-a-security-vulnerability Comments URL: https://news.ycombinator.com/item?id=49440410 Points: 178 # Comments: 75
A newly uncovered phishing-as-a-service (PhaaS) platform called AnonyMousKIT automates the retrieval of codes used to unlock stolen Apple devices and disable the Activation Lock fe…
The cost of memory makes this an expensive ML meal
Shared memory is live, with no option to separate it between services, Anthropic tells us; Claude Code stays apart for now
Attackers can exploit a security bug in Nvidia's tool to gain unauthenticated access to the local model server through the Ollama API, paving the way for persistent AI agent corrup…
The U.S. Department of the Treasury has announced fresh sanctions on Iranian cyber actors as part of what it called an "unprecedented, whole-of-government, economic campaign" again…
Fasten your seatbelt and empty that bladder: AI investment is rising, but reported enterprise earnings impact remains stubbornly flat
If you’ve been spinning up AI tools — Claude Desktop, Cursor, Copilot, and so on — there’s a decent chance that API keys, credentials, and access tokens are sitting in plaintext on…
State and local regulators would decide whether the public gets a say on minor-source permits
TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation. The post Linux Foundation to Govern TRACE, an Open Standard for AI Runtime At…
By popular demand, Keith is joined once again by Ferney Muñoz and Tom Hildebrand to answer listener questions and to dive deeper into designing high-density Wi-Fi for large-scale e…
Attackers now ready to exploit how things work, rather than just break them, says Oracle support expert
Current Exchange connector is retiring - and new ones won't work if you don't upgrade
A large distributed denial-of-service (DDoS) attack has disrupted Norway's shared government digital infrastructure since Monday, affecting services used by the public sector. [...…
OpenAI wants you to thank it for keeping a permanent record of all your discussions with its bots
As breach costs reach record highs and defense spending nears $240 billion, small businesses are dangerously exposed, threatening supply chain security.
Healthcare and services provider Nutex is investigating a data breach incident where an unauthorized third party exfiltrated information from company servers. [...]