Tags → #stories

Vulnerabilities
Study Identifies Vulnerabilities in MPC-in-the-Head Framework
Nov 22, 2024 Researchers in France have identified significant vulnerabilities in the MPC-in-the-Head framework through a novel single trace side-channel attack, highlighting the need for improved countermeasures in cryptographic systems.
Vulnerabilities
Study Reveals Vulnerabilities of LLMs to Bit-Flip Attacks
Nov 22, 2024 A recent study reveals that large language models (LLMs) are vulnerable to bit-flip attacks, which can drastically reduce their performance, prompting the introduction of a new framework called AttentionBreaker to identify and exploit these vulnerabilities.
Vulnerabilities
Vulnerabilities Identified in SLIM and LBCIoT Cryptographic Algorithms
Nov 22, 2024 Recent analysis has identified vulnerabilities in the SLIM and LBCIoT lightweight cryptographic algorithms, raising concerns for their application in Internet of Things (IoT) devices.
Policy
Aeva Black Keynotes RustConf 2024 on Open Source Software
Nov 21, 2024 Aeva Black delivered the opening keynote at RustConf 2024, highlighting the importance of enhancing the security of open source software and discussing its significant economic impact.
Vulnerabilities
AV1 Decoding Fuzz Testing Project on Apple Platforms
Nov 21, 2024 A project has been initiated to implement and fuzz test AV1 decoding on Apple platforms, utilizing hardware acceleration and focusing on the AppleAVD kernel extension.
Cybercrime
BlueSky Surpasses 20 Million Users Amid Rising Scam Concerns
Nov 21, 2024 BlueSky, a decentralized microblogging platform, has surpassed 20 million users but is facing challenges with an increase in cryptocurrency scams and fraudulent activities.
Tools
CNN Model Proposed for Cyberattack Detection in IoMT
Nov 21, 2024 A proposed Convolutional Neural Network (CNN) model aims to enhance cybersecurity in the Internet of Medical Things (IoMT) by achieving high accuracy in detecting cyberattacks, while also addressing challenges related to real-time performance and integration within healthcare networks.
Threats
Comparison of VenomRAT and AsyncRAT in Cybersecurity
Nov 21, 2024 Remote Access Tools (RATs), such as VenomRAT and AsyncRAT, are utilized by cyber attackers for unauthorized system control, with distinct differences in their capabilities and detection methods.
Vulnerabilities
Critical Local Privilege Escalation Vulnerabilities Found in Needrestart
Nov 21, 2024 The Qualys Threat Research Unit has identified five critical Local Privilege Escalation vulnerabilities in the needrestart component, which is installed by default on Ubuntu Server, allowing unprivileged users to gain root access without user interaction.
Vulnerabilities
CWE Releases Top 25 List of Software Vulnerabilities
Nov 21, 2024 The Common Weakness Enumeration (CWE) Top 25 list has been released, identifying critical software vulnerabilities that require attention from developers and security professionals.