Hacker News with Generative AI: Security Vulnerabilities

D-Link says replace vulnerable routers or risk pwnage (theregister.com)
Owners of older models of D-Link VPN routers are being told to retire and replace their devices following the disclosure of a serious remote code execution (RCE) vulnerability.

Cybersecurity, Networking, Security Vulnerabilities, Hardware

8 points by fork-bomber 17 hours ago | 1 comments

Unauthenticated RCE vs. all GNU/Linux systems (+ others) disclosed 3 weeks ago (twitter.com)

Cybersecurity, Linux, Security Vulnerabilities

35 points by jesboat 59 days ago | 5 comments

Zero-Click Calendar invite vulnerability chain in macOS (medium.com)
I found a zero-click vulnerability in macOS Calendar, which allows an attacker to add or delete arbitrary files inside the Calendar sandbox environment. This could lead to many bad things including malicious code execution which can be combined with security protection evasion with Photos to compromise users’ sensitive Photos iCloud Photos data. Apple has fixed all of the vulnerabilities between October 2022 and September 2023.

macOS Security, Zero-Click Exploits, Calendar Apps, Security Vulnerabilities

461 points by jviide 69 days ago | 159 comments

BSI discovers serious vulnerabilities in Mastodon, some minor ones in Matrix (heise.de)

Cybersecurity, Social Media, Security Vulnerabilities, Open Source

5 points by flo123456 78 days ago | 0 comments

The new frontier in script kiddie security vulnerability reports (microsoft.com)

Cybersecurity, Security Vulnerabilities, Script Kiddies, Microsoft

17 points by ingve 120 days ago | 0 comments

New Blast-RADIUS attack breaks 30-year-old protocol used in networks everywhere (arstechnica.com)

Cybersecurity, Networking, Security Vulnerabilities, Protocol

11 points by tapper 134 days ago | 0 comments

New Blast-RADIUS attack breaks 30-year-old protocol used in networks everywhere (arstechnica.com)