Aggregator

Qilin

Dark Feed IO
5 days 22 hours ago

You must login to view this content

cohenido

Abbott probes two cyber incidents amid extortion claims

Bleeping Computer.
5 days 22 hours ago
Abbott Laboratories is investigating two separate cybersecurity incidents after confirming unauthorized access to internal legacy Exact Sciences systems in its Cancer Diagnostics business, while also investigating a separate claim that attackers breached its LabCentral portal and stole company data. [...]
Lawrence Abrams

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests

The Hackers News
5 days 22 hours ago
Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message that never arrives. On the glibc systems Okta tested, that memory is gone until the process restarts. OpenSSL shipped the HollowByte fix in June with no CVE, no advisory, and no changelog entry pointing at it. Okta's Red Team, which reported the denial-of-service bug and named it, published the
The Hacker News

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

The Hackers News
6 days ago
Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. The malicious package campaign, codenamed ViteVenom by Checkmarx, marks an expansion of ChainVeil, which was observed using an "unprecedented" four-tier blockchain-based command-and-control (C2) infrastructure spanning Tron,
The Hacker News

OpenSSL “HollowByte” Vulnerability Lets Hackers Crash Servers With Just 11 Bytes

Cyber Security News
6 days ago

A newly disclosed vulnerability in OpenSSL, dubbed “HollowByte,” allows a remote, unauthenticated attacker to trigger a denial-of-service (DoS) condition using a malicious payload as small as 11 bytes. Discovered by the Okta Red Team, the flaw exploits how OpenSSL pre-allocates memory during the TLS handshake, forcing servers to reserve massive memory chunks before any authentication […]

The post OpenSSL “HollowByte” Vulnerability Lets Hackers Crash Servers With Just 11 Bytes appeared first on Cyber Security News.

Guru Baran

Managed ad