A Stalled DTLS Handshake Could Make OpenSSL Send Heap Memory in Plaintext
OpenSSL fixed a high-severity DTLS flaw that can expose heap memory in plaintext. The condition is narrow, but every branch analysed in the advisory is affected.
Security
Vulnerabilities, defensive security, architecture and operational security.
NeedyMantis Is Hiding Behind Poedit, curl, Vim and TightVNC
Microsoft found NeedyMantis hiding beside legitimate software in targeted intrusions. The real hunt starts before the backdoor appears.
Researchers Read a Linux Root Hash With Spectre Defences Still On
Branch Target Reuse recovered a Linux root hash on Intel test systems, exposing a local JIT weakness that Linux updates now target.
A Real ChatGPT Page Led Users Into a Fake Verification Trap
An attacker-built Custom GPT used a real ChatGPT page to lead people to a fake check on Google Sites. The practical boundary is the instruction to run code outside the browser.
DIVD Says Its Intruder’s AI Agent Left a Trail Investigators Could Follow
An intruder's automated decisions left DIVD investigators useful clues. That does not establish how much damage was done.
DC’s Public Health Reports Carried Hidden Data on Nearly 400,000 People
A public summary can still carry private records. DC's Medicaid agency says two website reports contained hidden beneficiary information potentially reachable between 2023 and July 2026.
A Password Reset Cannot Take Back the Identity Data Stolen From Times Car
Times Car says an intruder acquired data linked to about 6.6 million accounts. Identity-document information, including driving licence images, is in the variable field list. The number of images and any later misuse remain unconfirmed.
Adobe Commerce’s August Patch Now Comes With a Reason to Hunt for Intruders
Adobe's August bulletin said it knew of no exploitation. CISA has now placed the unauthenticated privilege-escalation flaw in KEV and called for forensic triage.
Apple Says a Crafted File May Have Powered an Extremely Sophisticated iPhone Attack
Apple says a maliciously crafted file could trigger arbitrary code execution and may have been used against specific targeted individuals. The fixes reach iPhone, iPad and two supported macOS branches.
Your Clean Threat Hunt Might Be a Broken Data Pipeline
Half of the hunters in a new SANS survey say data is their biggest obstacle. A clean search result means little until the team has proved the evidence path works.