Hacker News with Generative AI: Vulnerabilities

Microsoft Telnet Server MS-TNAP Authentication Bypass (github.com/gavz)
A critical 0-click remote authentication bypass vulnerability in Microsoft Telnet Server that allows attackers to gain access as any user, including Administrator, without requiring valid credentials.
Security, Microsoft, Telnet, Vulnerabilities, Remote Access
8 points by 0x0 10 days ago | 1 comments
AirBorne: Wormable zero-click remote code execution (RCE) in AirPlay protocol (oligo.security)
Oligo Security Research has discovered a new set of vulnerabilities in Apple’s AirPlay Protocol and the AirPlay Software Development Kit (SDK), which is used by third-party vendors to integrate AirPlay into third-party devices.
Security, Apple, Vulnerabilities, AirPlay, Zero-Day
129 points by throw0101a 10 days ago | 21 comments
How a single line of code could brick your iPhone (rambo.codes)
This is the story of how I found one of my favorite iOS vulnerabilities so far. It’s one of my favorites because of how simple it was to implement an exploit for it. There’s also the fact that it uses a legacy public API that’s still relied upon by many components of Apple’s operating systems, and that many developers have never heard of.
Security, iOS, Programming, Apple, Vulnerabilities
501 points by sashk 12 days ago | 123 comments
Linux Patch Queued to Report Outdated Intel CPU Microcode as a Vulnerability (phoronix.com)
Last year a patch was raised for the Linux kernel that would report outdated CPU microcode versions as a security vulnerability.
Linux, Security, Vulnerabilities, CPU Microcode
6 points by doener 18 days ago | 0 comments
Can We Trust CVE? (opensourcesecurity.io)
If you are a security nerd, and even if you’re not, you probably heard about the epic CVE mess that happened. It’s a very long story and was covered in many places, but the TL;DR was the funding for CVE fell through, panic ensued, then CISA found some temporary funds to keep the lights, so everything is fine and we can all go back to normal.
Cybersecurity, Vulnerabilities, Open Source
58 points by gpi 19 days ago | 17 comments
Cisco Webex bug lets hackers gain code execution via meeting links (bleepingcomputer.com)
Cisco has released security updates for a high-severity Webex vulnerability that allows unauthenticated attackers to gain client-side remote code execution using malicious meeting invite links.
Security, Cybersecurity, Cisco, Webex, Vulnerabilities
5 points by LinuxBender 21 days ago | 0 comments
Cross-Site WebSocket Hijacking Exploitation in 2025 (includesecurity.com)
Some of my favorite findings discovered during our client assessments at Include Security have exploited Cross-Site Websocket Hijacking (CSWSH) vulnerabilities.
Security, Web Exploitation, Vulnerabilities
5 points by ErikCabetas 22 days ago | 1 comments
The CVE program for tracking security flaws is about to lose federal funding (theverge.com)
Financial support for the system that tracks publicly disclosed cybersecurity vulnerabilities expires on April 16th.
Cybersecurity, Government Funding, Vulnerabilities
25 points by ceejayoz 24 days ago | 1 comments
Uncovering a 0-Click RCE in the SuperNote Nomad E-Ink Tablet (prizmlabs.io)
Uncovering a 0-Click RCE in the SuperNote Nomad E-ink Tablet
Cybersecurity, Software, Vulnerabilities, Hardware
136 points by mbrown379 32 days ago | 10 comments
MCP Security Notification: Tool Poisoning Attacks (invariantlabs.ai)
Invariant has discovered a critical vulnerability in the Model Context Protocol (MCP) that allows for what we term Tool Poisoning Attacks. This vulnerability can lead to sensitive data exfiltration and unauthorized actions by AI models. We explain the attack vector, its implications, and mitigation strategies. We urge users to exercise caution when connecting to third-party MCP servers and to implement security measures to protect sensitive information.
Cybersecurity, AI Security, Vulnerabilities
6 points by throwawai123 33 days ago | 0 comments
Zero Day in Microchip SAM Microcontrollers (recessim.com)
This write-up will cover analysis of the Microchip (ATMEL) SAM4C32 microcontroller vulnerability that allows an attacker to gain unlocked JTAG access to a previously locked device.
Security, Microcontrollers, Vulnerabilities, Hardware
74 points by BitBangingBytes 37 days ago | 20 comments
Microsoft reports several bootloader vulnerabilities (microsoft.com)
By leveraging Microsoft Security Copilot to expedite the vulnerability discovery process, Microsoft Threat Intelligence uncovered several vulnerabilities in multiple open-source bootloaders, impacting all operating systems relying on Unified Extensible Firmware Interface (UEFI) Secure Boot as well as IoT devices.
Security, Vulnerabilities, Open Source, UEFI
91 points by hacknslack 39 days ago | 59 comments
Critical Unauthenticated Remote Code Execution Vulnerabilities in Ingress NGINX (wiz.io)
Wiz Research discovered CVE-2025-1097, CVE-2025-1098, CVE-2025-24514 and CVE-2025-1974, a series of unauthenticated Remote Code Execution vulnerabilities in Ingress NGINX Controller for Kubernetes dubbed #IngressNightmare. Exploitation of these vulnerabilities leads to unauthorized access to all secrets stored across all namespaces in the Kubernetes cluster by attackers, which can result in cluster takeover.  This attack vector has been assigned a CVSS v3.1 base score of 9.8. 
Cybersecurity, Kubernetes, Vulnerabilities
79 points by puppion 45 days ago | 11 comments
RCE Vulnerabilities in K8s Ingress Nginx (9.8 CVE for ingress-Nginx) (wiz.io)
Wiz Research discovered CVE-2025-1097, CVE-2025-1098, CVE-2025-24514 and CVE-2025-1974, a series of unauthenticated Remote Code Execution vulnerabilities in Ingress NGINX Controller for Kubernetes dubbed #IngressNightmare. Exploitation of these vulnerabilities leads to unauthorized access to all secrets stored across all namespaces in the Kubernetes cluster by attackers, which can result in cluster takeover.  This attack vector has been assigned a CVSS v3.1 base score of 9.8.
Cybersecurity, Kubernetes, Vulnerabilities, Ingress Nginx
11 points by todsacerdoti 45 days ago | 1 comments
Leaking Passwords and more on macOS (wts.dev)
This article discusses a vulnerability, CVE-2024-54471, that was patched as part of the Apple security releases: macOS Sequoia 15.1, macOS Sonoma 14.7.1, and macOS Ventura 13.7.1 (all released on October 28th, 2024). If you use a macOS device and are not on one of these updated versions: update now!
Security, macOS, Vulnerabilities
325 points by nmgycombinator 50 days ago | 62 comments
Grease: An Open-Source Tool for Uncovering Hidden Vulnerabilities in Binary Code (galois.com)
Proactively and defensively ensuring the absence of vulnerabilities in binary code is crucial for deploying high-assurance systems. GREASE is an open-source tool leveraging under-constrained symbolic execution to help software reverse engineers analyze binaries and uncover hard-to-spot bugs, ultimately enhancing system security. This kind of binary analysis is especially important for systems that include COTS software that is only provided in binary form.
Security, Software Engineering, Open Source, Binary Analysis, Vulnerabilities
116 points by thinkmoore 50 days ago | 12 comments
Sign in as anyone: Bypassing SAML SSO authentication with parser differentials (github.blog)
Critical authentication bypass vulnerabilities (CVE-2025-25291 + CVE-2025-25292) were discovered in ruby-saml up to version 1.17.0. Attackers who are in possession of a single valid signature that was created with the key used to validate SAML responses or assertions of the targeted organization can use it to construct SAML assertions themselves and are in turn able to log in as any user.
Security, Authentication, SAML, Ruby, Vulnerabilities
312 points by campuscodi 55 days ago | 123 comments
Broadcom urges VMware customers to patch 'emergency' zero-day bugs (techcrunch.com)
U.S. technology giant Broadcom is warning that a trio of VMware vulnerabilities are being actively exploited by malicious hackers to compromise the networks of its corporate customers.
Cybersecurity, Software, Vulnerabilities, Zero-Day Exploits
5 points by jatwork 65 days ago | 0 comments
Threat posed by new VMware hyperjacking vulnerabilities is hard to overstate (arstechnica.com)
Three critical vulnerabilities in multiple virtual-machine products from VMware can give hackers unusually broad access to some of the most sensitive environments inside multiple customers’ networks, the company and outside researchers warned Tuesday.
Cybersecurity, VMware, Vulnerabilities, Security Research
7 points by jnord 65 days ago | 0 comments
Hash Denial-of-Service Attack in Multiple QUIC Implementations (github.com/ncc-pbottine)
This technical advisory describes a class of vulnerabilities affecting several QUIC implementations.
Security, Networking, QUIC, Vulnerabilities
4 points by weinzierl 69 days ago | 2 comments
Wallbleed: A Memory Disclosure Vulnerability in the Great Firewall of China (gfw.report)
We present Wallbleed, a buffer over-read vulnerability that existed in the DNS injection subsystem of the Great Firewall of China.
Security, China, Networking, Vulnerabilities
8 points by bjin 72 days ago | 0 comments
An illustrated guide to the Kaminsky DNS vulnerability (2008) (unixwiz.net)
The big security news of Summer 2008 has been Dan Kaminsky's discovery of a serious vulnerability in DNS. This vulnerability could allow an attacker to redirect network clients to alternate servers of his own choosing, presumably for ill ends.
Security, Networking, DNS, Vulnerabilities
25 points by amidtheperf 73 days ago | 6 comments
Critical PostgreSQL bug tied to zero-day attack on US Treasury (theregister.com)
A high-severity SQL injection bug in the PostgreSQL interactive tool was exploited alongside the zero-day used to break into the US Treasury in December, researchers say.
Cybersecurity, Databases, Government, Vulnerabilities, Zero-Day Exploits
19 points by rntn 84 days ago | 11 comments
7-Zip 0-day was exploited in Russia's ongoing invasion of Ukraine (arstechnica.com)
Researchers said they recently discovered a zero-day vulnerability in the 7-Zip archiving utility that was actively exploited as part of Russia's ongoing invasion of Ukraine.
Cybersecurity, Ukraine, Russia, Software, Vulnerabilities
7 points by pitwin 92 days ago | 1 comments
7-Zip 0-day was exploited in Russia's ongoing invasion of Ukraine (arstechnica.com)
Researchers said they recently discovered a zero-day vulnerability in the 7-Zip archiving utility that was actively exploited as part of Russia's ongoing invasion of Ukraine.
Cybersecurity, Ukraine, Russia, 7-Zip, Vulnerabilities
12 points by LinuxBender 92 days ago | 1 comments
A look at the recent rsync vulnerability (lwn.net)
Security, Linux, Vulnerabilities
6 points by belter 94 days ago | 0 comments
Patient Monitor Contec CMS8000 Contains a Backdoor (cisa.gov)
This fact sheet details an analysis of three firmware package versions of the Contec CMS8000, a patient monitor used by the U.S. Healthcare and Public Health (HPH) sector. Analysts discovered that an embedded backdoor function with a hard-coded IP address, CWE – 912: Hidden Functionality (CVE-2025-0626), and functionality that enables patient data spillage, CWE – 359: Exposure of Private Personal Information to an Unauthorized Actor (CVE-2025-0683), exists in all versions analyzed.
Cybersecurity, Healthcare, Vulnerabilities, Firmware, Backdoors
59 points by doener 98 days ago | 12 comments
Apple fixes this year's first actively exploited zero-day bug (bleepingcomputer.com)
Apple has released security updates to fix this year's first zero-day vulnerability, tagged as actively exploited in attacks targeting iPhone users.
Security, Apple, Vulnerabilities, Zero-day
6 points by croes 101 days ago | 0 comments
Over 660k Rsync servers exposed to code execution attacks (bleepingcomputer.com)
Over 660,000 exposed Rsync servers are potentially vulnerable to six new vulnerabilities, including a critical-severity heap-buffer overflow flaw that allows remote code execution on servers.
Security, Server Security, Vulnerabilities
20 points by nimar 112 days ago | 5 comments
Rsync vulnerabilities (openwall.com)
Two independent groups of researchers have identified a total of 6 vulnerabilities in rsync. In the most severe CVE, an attacker only requires anonymous read access to a rsync server, such as a public mirror, to execute arbitrary code on the machine the server is running on.
Security, Vulnerabilities, Software, Open Source
148 points by pavodive 114 days ago | 23 comments