A Rust crate named Arrayref was found to run a malicious payload during build time, raising security concerns for developers using Rust packages.
Malicious Rust Crate Arrayref Runs A Build-time Payload
Browsing Category
Security
90 posts
AliExpress Runs Silent WebAudio Fingerprinting That Breaks Bluetooth Multipoint
AliExpress’s silent WebAudio fingerprinting technique interferes with Bluetooth multipoint connections, raising security and privacy concerns.
Someone Is Running Mass Vulnerability Scans, Spoofing AI Bots Like ClaudeBot
An unidentified actor is conducting large-scale vulnerability scans while impersonating AI bots such as ClaudeBot, raising security concerns.
Illinois Just Passed A Law That Puts Linux On The Hook For Age Verification
Illinois passes a law requiring Linux-based systems to enforce age verification, raising questions about implementation and impact.
Exploiting System Management Mode With A Very Long Interrupt
Researchers reveal a vulnerability allowing attackers to exploit System Management Mode using extended interrupts, raising concerns over hardware security.
Hardware Backdoors In Some X86 CPUs
Security researchers reveal confirmed hardware backdoors in certain x86 processors, raising concerns over potential covert access and data security.
US Military’s Cyber Command Unit Grapples With Cluster Of Deaths By Suicide
US Cyber Command reports a cluster of suicides among its personnel, raising concerns about mental health and support systems in military cyber units.
Framework Discloses Data Breach Via Metabase 0-Day
Framework discloses a data breach resulting from a zero-day vulnerability in Metabase, raising security concerns for affected organizations.
Meta Ordered To Pay $942M To Address Harm To Kids From Social Media
A court has ordered Meta to pay $942 million to address alleged harm caused by its social media platforms to minors. The ruling highlights ongoing concerns over youth safety online.
Atlassian Rovo Exfiltrates Data, Bypassing Controls
Atlassian reports that its Rovo platform was exploited to exfiltrate data, bypassing existing security controls. Details are still emerging.
