Dan Goodin

New Rowhammer Attacks - Full Control of Nvidia GPUs
New Rowhammer attacks exploit Nvidia GPUs, allowing attackers to gain complete control over host machines. This vulnerability poses significant risks for cloud environments. Users should take immediate action to secure their systems.
Vulnerabilities in IP KVMs - Security Risks Exposed
Researchers disclosed nine vulnerabilities in IP KVMs from four manufacturers, exposing networks to serious risks. Many devices remain unpatched, making them easy targets for attackers. It's crucial for admins to secure these devices promptly.
Invisible Code Supply-Chain Attack Hits GitHub Repositories
A new supply-chain attack is flooding repositories with invisible code. GitHub and other platforms are affected. Developers must be vigilant against these sophisticated threats to protect their projects.
14,000 Routers Infected by Resilient Malware
A staggering 14,000 Asus routers in the US are infected with tough malware. This puts your personal data at risk. Take action now to secure your network!
cURL Ditches Bug Bounties Amid AI Overload
cURL has stopped accepting bug bounties due to overwhelming AI-generated reports. Developers are facing confusion from bogus vulnerabilities. This could impact the reliability of tools you use daily. Stay tuned for updates on how cURL is managing this AI challenge.
Microsoft's Autodiscover Exposes User Credentials to Japan
Microsoft's autodiscover feature mistakenly sent user login info to a Japanese company. This raises serious privacy concerns for users. Microsoft is investigating and promising fixes, but vigilance is key.
County Settles for $600K After Arresting Security Testers
A county has agreed to pay $600,000 after wrongly arresting security testers. This incident raises serious concerns about understanding cybersecurity practices. It's a reminder of the importance of clear communication in tech-related work.
dYdX Exchange Hit Again: User Wallets Emptied!
Hackers have struck dYdX again, draining user wallets through malicious software. This attack raises serious concerns about the security of cryptocurrency exchanges. Users are urged to verify software before downloading and enhance their security measures.
Scam Spam Exploits Microsoft’s Reputation
Scammers are using real Microsoft email addresses to send fraudulent messages. This tactic makes it harder for people to spot scams. Stay vigilant and verify sender addresses to protect yourself from potential identity theft.
Urgent Microsoft Office Patch Released Amid Russian Hacker Threat
Microsoft has released an urgent patch for Office due to threats from Russian hackers. This affects anyone using the software, risking personal and financial data. Update your software now to stay safe!