New Glove infostealer malware bypasses Chrome’s cookie encryption

Looking for Lemmy accounts about software vulnerabilities, CVEs, etc.

shopping issue

Chinese researchers break RSA encryption with a quantum computer

European govt air-gapped systems breached using custom malware

Linux Kernel CVEs, What Has Caused So Many to Suddenly Show Up? - talk by Greg Kroah-Hartman (August 2024)

Vulnerability Lookup 1.5.0

"we finally extracted Intel SGX Fuse Key0, AKA Root Provisioning Key. Together with FK1 or Root Sealing Key (also compromised), it represents Root of Trust for SGX"

Wihkum - Emergency Response App for Schools in 2024

ONNX Bot Tool Hijacks Microsoft 365 accounts & Even Bypass 2FA

iVerify found stock Google Pixel devices' app "showcase" With Excessive System Privileges, Including Remote Code Execution

0.0.0.0 Day: 18-Year-Old Browser Vulnerability Impacts MacOS and Linux Devices

Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption

Signal downplays encryption key flaw, fixes it after X drama

Vulnerability Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure.

CVE-2024-6409: OpenSSH: Possible remote code execution in privsep child

Codeintegrity-ai/mutahunter: Open Source, Language Agnostic LLM-based mutation testing tool

Firmware flaw affects numerous generations of Intel CPUs — UEFI code execution vulnerability found for Intel CPUs from 14th Gen Raptor Lake to 6th Gen Skylake CPUs, and TPM will not save you

New Wi-Fi Takeover Attack—All Windows Users Warned To Update Now

BusKill Warrant Canary for 2024 H2 🕵️