Tag: supply chain risks
10 articles
Cloud Platforms Expose Phishers to Easy MFA Bypass Tactics
Reputable cloud platforms have unwittingly become a phishing haven, with threat actors exploiting their trusted reputations, generous free tiers, and instant onboarding to launch attacks - all thanks to lenient security measures that rarely require verification. This has made it alarmingly easy for phishers to bypass multi-factor authentication and wreak havoc.
Senators Warn of AI Security Risks from US Policy Unpredictability
US senators are warning that the unpredictable approach to AI security is undermining America's competitiveness and inadvertently driving businesses to adopt Chinese alternatives, which could create new security risks. This lack of clarity is prompting concerns that customers may be pushed towards less secure options.
Hugging Face Breach Exposes AI Model Risks
Hugging Face revealed a shocking breach that highlights the hidden dangers of AI models, admitting to unauthorized access to internal datasets and credentials used by its services. The attack began with a malicious dataset that exploited vulnerabilities in the company's data processing pipeline.
Free Android VPN Apps Expose User Traffic, Fail Basic Security Tests
Over 2.4 billion installs of free Android VPN apps have potentially exposed users to security risks, according to a recent study that revealed these apps fail basic security tests. A new testing framework called MVPNalyzer was used to evaluate the apps and uncovered alarming vulnerabilities, including the serious flaw of tunnel hijacking.
CISA's Election Security Support Plummets Ahead of Midterms
As the midterms approach, Senator Mark Warner is sounding the alarm on a concerning decline in federal election security support, warning that states can't go it alone in protecting their elections from growing physical and cyber threats. Without robust federal backing, states are left vulnerable to attacks, despite their best efforts to safeguard the democratic process.
vm2 Library Vulnerabilities Enable Sandbox Escape and Code Execution
A dozen critical vulnerabilities in the vm2 Node.js library can be exploited by hackers to break free from sandbox restrictions and run malicious code on vulnerable systems. This serious security flaw has been assigned high CVSS scores, emphasizing the urgent need for users to patch their systems.
Cross-App Permissions Expose Hidden Risks in AI-Driven SaaS Environments
Imagine a single security slip-up exposing 1.5 million API tokens and 35,000 email addresses, leaving AI agents and their users vulnerable to hijacking and misuse. The recent Moltbook breach reveals the hidden risks of cross-app permissions in AI-driven SaaS environments.
Vulnerabilities Expose 20,000 Serial-to-IP Converters to Hijacking Risk
A shocking 20,000 serial-to-IP converters are at risk of being hijacked due to newly discovered vulnerabilities, putting countless systems and data in jeopardy. Cybersecurity experts at Forescout Research Vedere Labs have uncovered 22 flaws in popular models from leading manufacturers Lantronix and Silex.
AI-Driven Vulnerability Risks Expose Security Teams to Reality Check
The AI-driven vulnerability landscape just got a harsh reality check: with AI-powered tools like Anthropic's Claude Mythos speeding up vulnerability discovery, security teams are facing a daunting new challenge - keeping up with the rapid pace of exploit development. The real question is, are defenders ready to respond?
Bithumb Unveils Post-Hack Recovery Strategy
In the wake of a crypto crisis, can the digital-asset ecosystem bounce back without shaking user trust? Bithumb's newly unveiled recovery strategy is a step in the right direction, but will it be enough to restore confidence after a string of high-profile hacks and mishaps?