#softwarevulnerability — Public Fediverse posts

General Atomics Resumes Drone Flights After Software Fix

General Atomics has safely resumed drone flights after swiftly addressing a software glitch that caused a crash in April, and implementing a fix to prevent future mishaps. The issue, which stemmed from an autopilot miscalculation, was quickly pinpointed and rectified, allowing testing to resume.

https://osintsights.com/general-atomics-resumes-drone-flights-after-software-fix?utm_source=mastodon&utm_medium=social

#Aviation #Drone #SoftwareVulnerability #AutopilotSystem #GeneralAtomics

Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised

https://safedep.io/mini-shai-hulud-strikes-again-314-npm-packages-compromised/

#HackerNews #MiniShaiHulud #npmSecurity #CyberThreats #PackageCompromise #SoftwareVulnerability

Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised

https://safedep.io/mini-shai-hulud-strikes-again-314-npm-packages-compromised/

#HackerNews #MiniShaiHulud #npmSecurity #CyberThreats #PackageCompromise #SoftwareVulnerability

Airbus Nears Completion of A320 Retrofit as Regulators Monitor Largest Emergency Recall in Company History https://thecyberexpress.com/airbus-a320-software-recall-retrofit/ #softwarevulnerability #TheCyberExpressNews #TheCyberExpress #FirewallDaily #JetBlueA320 #CyberNews #aircraft #Airbus #A320

Airbus Nears Completion of A320 Retrofit as Regulators Monitor Largest Emergency Recall in Company History https://thecyberexpress.com/airbus-a320-software-recall-retrofit/ #softwarevulnerability #TheCyberExpressNews #TheCyberExpress #FirewallDaily #JetBlueA320 #CyberNews #aircraft #Airbus #A320

Eurofiber France Confirms Data Exfiltration After System Breach https://thecyberexpress.com/cybersecurity-incident-at-eurofiber-france/ #cybersecurityincidentatEurofiberFrance #InternationalCyberDigest #cybersecurityincident #softwarevulnerability #TheCyberExpressNews #EurofiberFrance #TheCyberExpress #DataBreachNews #FirewallDaily #CyberNews #ATEPortal

Eurofiber France Confirms Data Exfiltration After System Breach https://thecyberexpress.com/cybersecurity-incident-at-eurofiber-france/ #cybersecurityincidentatEurofiberFrance #InternationalCyberDigest #cybersecurityincident #softwarevulnerability #TheCyberExpressNews #EurofiberFrance #TheCyberExpress #DataBreachNews #FirewallDaily #CyberNews #ATEPortal

Turkish Cyber Espionage Campaign Leverages Zero-Day in Output Messenger https://dailydarkweb.net/turkish-cyber-espionage-campaign-leverages-zero-day-in-output-messenger/ #MicrosoftThreatIntelligence #SoftwareVulnerability #ZeroDayVulnerability #nationalsecurity #OutputMessenger #CVE-2025-27920 #CyberEspionage #TurkishHackers #CyberSecurity #CyberAttacks #MarbledDust #databreach #hacking #Kurdish #Srimax

Turkish Cyber Espionage Campaign Leverages Zero-Day in Output Messenger https://dailydarkweb.net/turkish-cyber-espionage-campaign-leverages-zero-day-in-output-messenger/ #MicrosoftThreatIntelligence #SoftwareVulnerability #ZeroDayVulnerability #nationalsecurity #OutputMessenger #CVE-2025-27920 #CyberEspionage #TurkishHackers #CyberSecurity #CyberAttacks #MarbledDust #databreach #hacking #Kurdish #Srimax

🚨 Breaking News: In a shocking twist, a 403 Forbidden Error has been declared the latest software vulnerability, proving once again that bloat is the gift that keeps on giving. 🎉 Meanwhile, Varnish cache server's existential crisis deepens as it ponders its own forbidden existence. 🙈
https://spectrum.ieee.org/lean-software-development #BreakingNews #SoftwareVulnerability #VarnishCache #Error403 #BloatCrisis #TechHumor #HackerNews #ngated

🚨 Breaking News: In a shocking twist, a 403 Forbidden Error has been declared the latest software vulnerability, proving once again that bloat is the gift that keeps on giving. 🎉 Meanwhile, Varnish cache server's existential crisis deepens as it ponders its own forbidden existence. 🙈
https://spectrum.ieee.org/lean-software-development #BreakingNews #SoftwareVulnerability #VarnishCache #Error403 #BloatCrisis #TechHumor #HackerNews #ngated

"🚨 Lazarus Strikes Again: A Deep Dive into Their Latest Campaign 🚨"

The Lazarus group, known for its relentless cyber-espionage campaigns, has unveiled a new wave of attacks. This time, they compromised a software vendor through unpatched legitimate software. Despite available patches, many systems continued using the flawed software, making them easy prey for Lazarus. 🛡️💻

The group's modus operandi involved exploiting these software vulnerabilities and then deploying the SIGNBT malware using a DLL side-loading technique. This malware, SIGNBT, communicates with its C2 server and has a unique identifier, making it a signature Lazarus tool. Moreover, the group also deployed LPEClient, a tool previously seen in attacks on defense contractors and the cryptocurrency sector. 🌐🔗

Lazarus's tactics have evolved, now exploiting high-profile software vulnerabilities to spread their malware efficiently. Their targets span across industries, emphasizing their adaptability and determination. 🎯🌍

Source: Securelist - Unveiling Lazarus' New Campaign

Tags: #Lazarus #CyberSecurity #APT #SIGNBT #LPEClient #SoftwareVulnerability #CyberEspionage 🕵️‍♂️🔍🔐

MITRE ATT&CK - Lazarus

"🚨 Lazarus Strikes Again: A Deep Dive into Their Latest Campaign 🚨"

The Lazarus group, known for its relentless cyber-espionage campaigns, has unveiled a new wave of attacks. This time, they compromised a software vendor through unpatched legitimate software. Despite available patches, many systems continued using the flawed software, making them easy prey for Lazarus. 🛡️💻

The group's modus operandi involved exploiting these software vulnerabilities and then deploying the SIGNBT malware using a DLL side-loading technique. This malware, SIGNBT, communicates with its C2 server and has a unique identifier, making it a signature Lazarus tool. Moreover, the group also deployed LPEClient, a tool previously seen in attacks on defense contractors and the cryptocurrency sector. 🌐🔗

Lazarus's tactics have evolved, now exploiting high-profile software vulnerabilities to spread their malware efficiently. Their targets span across industries, emphasizing their adaptability and determination. 🎯🌍

Source: Securelist - Unveiling Lazarus' New Campaign

Tags: #Lazarus #CyberSecurity #APT #SIGNBT #LPEClient #SoftwareVulnerability #CyberEspionage 🕵️‍♂️🔍🔐

MITRE ATT&CK - Lazarus

Visualizing vulnerability metrics by merely counting the CVEs per vendor might provide insights into vendors with robust vulnerability disclosure processes. However, it is essential not to overlook the significant blind spot represented by vendors who fail to report any CVEs at all.

It is crucial to consider the broader picture by acknowledging the existence of vendors who do not actively fill any CVEs, potentially indicating deficiencies in their vulnerability management and disclosure procedures.

The challenge lies in quantifying unreported vulnerabilities and identifying vendors that fall into this category. How can we account for what has not been disclosed, and how do we go about identifying such vendors?

#cve #softwarevulnerability #infosec #vulnerability

Visualizing vulnerability metrics by merely counting the CVEs per vendor might provide insights into vendors with robust vulnerability disclosure processes. However, it is essential not to overlook the significant blind spot represented by vendors who fail to report any CVEs at all.

It is crucial to consider the broader picture by acknowledging the existence of vendors who do not actively fill any CVEs, potentially indicating deficiencies in their vulnerability management and disclosure procedures.

The challenge lies in quantifying unreported vulnerabilities and identifying vendors that fall into this category. How can we account for what has not been disclosed, and how do we go about identifying such vendors?

#cve #softwarevulnerability #infosec #vulnerability

Ars Technica: A world of hurt for Fortinet and Zoho after users fail to install patches https://arstechnica.com/?p=1919707 #Tech #arstechnica #IT #Technology #softwarevulnerability #vulnerabilities #cybersecurity #Biz&IT

Unpatched vulnerabilities in Fortinet and Zoho products come under mass attack

https://arstechnica.com/?p=1919707

#softwarevulnerability #vulnerabilities #cybersecurity #Biz&IT

How to Build an Effective Vulnerability Management Program - To manage vulnerabilities in your company effectively, it is worth going through s... - https://readwrite.com/how-to-build-an-effective-vulnerability-management-program/ #vulnerabilitymanagement #softwarevulnerability #softwarepatching #dataandsecurity #vulnerabilities #cybersecurity #cyberattack

How to Build an Effective Vulnerability Management Program - To manage vulnerabilities in your company effectively, it is worth going through s... - https://readwrite.com/how-to-build-an-effective-vulnerability-management-program/ #vulnerabilitymanagement #softwarevulnerability #softwarepatching #dataandsecurity #vulnerabilities #cybersecurity #cyberattack