Cyber Security

Apple’s Private Find My People Reversed to Decrypt Live Shared Locations on Linux

A security researcher has successfully reverse-engineered Apple's private Find My People protocol, demonstrating that a Linux machine can register with…

5 days ago

Critical Microsoft Entra ID Vulnerability Enables Remote Code Execution Attacks

Update: The article was updated post-publication to reflect a Microsoft update, clarifying that the vulnerability is not currently being exploited…

5 days ago

CRLF-Powered Desync Lets Attackers Poison CDN Cache and Serve XSS to Live Users

A limited CRLF injection flaw can be escalated into a severe HTTP desynchronization attack, poisoning CDN caches and delivering XSS…

5 days ago

AWS Shows How to Stop a Hijacked AI Agent From Reading Data the User Cannot Access

Enterprises are racing to deploy AI agents that pull from databases, document repositories, SaaS platforms, and internal knowledge bases to…

5 days ago

Microsoft Defender Driver Can Be Weaponized to Disable EDR and AV From Windows Kernel

Microsoft Defender’s legitimate Boot-Time Removal (BTR.sys) driver can be repurposed to perform powerful kernel-level file and registry operations, potentially enabling…

5 days ago

New “Zombie Card” Flaw Lets Expired Visa Cards Make Contactless Payments

Security researchers have demonstrated that an expired credit card is not as dead as most cardholders believe. A new study…

5 days ago

U.S. Agencies Warn of Hackers Actively Attacking Siemens S7 PLCs in Critical Facilities

The NSA, CISA, FBI, Department of Energy, and EPA issued a joint cybersecurity advisory on August 19 warning that threat…

6 days ago

T-Mobile Cyber Team Physically Cuts Cable to Remove Chinese Hackers From Network

T-Mobile's security team resorted to an unusually low-tech fix for a high-tech problem in 2024, physically severing a network cable…

6 days ago

AI Agent Hacks Snowflake GitHub Workflow and Reaches Internal Jira

An autonomous AI security agent built by Wiz Research has demonstrated how quickly a single overlooked line of shell code…

6 days ago

Windows Defender Update for 0-day Vulnerability Breaks Virus Scans

Microsoft Defender has been aborting Quick, Full, and Offline virus scans after a cluster of Security Intelligence updates reached Windows…

6 days ago