Lightnews — Scholar-powered news

HorXi @horxi.bsky.social · 20h

A critical vulnerability in AMD’s Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP), a cornerstone of confidential computing deployed by major cloud providers like AWS, Azure, and Google Cloud.

cybersecuritynews.com/new-rmpocaly...

New RMPocalypse Attack Let Hackers Break AMD SEV-SNP To Exfiltrate Confidential Data

A critical vulnerability in AMD's Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP), a cornerstone of confidential computing deployed by major cloud providers like AWS, Azure, and Go...

cybersecuritynews.com

HorXi @horxi.bsky.social · 20h

Owners of some Jeep Wrangler 4xe hybrids have been left stranded after installing an over-the-air software update

arstechnica.com/cars/2025/10...

Software update bricks some Jeep 4xe hybrids over the weekend

Jeep has pulled the update; owners are advised to ignore it if it already downloaded.

arstechnica.com

HorXi @horxi.bsky.social · 20h

[…] national push to combat social media’s potential health risks that has grown […]. Recent research has linked the technology to increased anxiety, body dysmorphia and sleep interruption in children, among other impacts.

www.politico.com/news/2025/10...

Social media must warn users of ‘profound’ health risks under new California law

It’s the latest state to mandate such warnings, advocated by the former U.S. surgeon general.

www.politico.com

HorXi @horxi.bsky.social · 20h

Security researchers have resurrected a 12-year-old data-stealing attack on web browsers to pilfer sensitive info from Android devices.

The attack, dubbed Pixnapping, has yet to be mitigated.

www.theregister.com/2025/10/13/a...

Android Pixnapping attack can capture app data like 2FA info

: GPU-based timing attack inspired by decade-old iframe technique

www.theregister.com

HorXi @horxi.bsky.social · 20h

[…] warning that a new generation of untraceable weapons could soon eclipse the “ghost guns” that have already flooded U.S. streets.

apnews.com/article/ghos...

Gun safety advocates warn of a surge in untraceable 3D-printed weapons in the US

Police in a handful of big cities have seen an increase in 3D printed guns over the last few years. That's leading gun-safety advocates, law enforcement, legislators and industry experts to seek early...

apnews.com

HorXi @horxi.bsky.social · 1d

The Dairy Farmers of America said cybercriminals breached company systems in June, gaining access to the information of employees and members of the cooperative.

therecord.media/dairy-farm-l...

Dairy Farmers of America confirms June cyberattack leaked personal data

The Dairy Farmers of America said cybercriminals breached company systems in June, gaining access to the information of employees and members of the cooperative.

therecord.media

HorXi @horxi.bsky.social · 1d

North Korean state-linked hackers have begun using public blockchains to deliver malware and steal cryptocurrency, in what researchers say is the first known case of a nation-state adopting the technique.

therecord.media/north-korean...

North Korean hackers seen using blockchain to hide crypto-stealing malware

Google security researchers said they observed a Pyongyang-backed hacking group, tracked as UNC5342, deploying a method known as EtherHiding — a way of embedding malicious code inside smart contracts ...

therecord.media

HorXi @horxi.bsky.social · 1d

Hackers are increasingly using stolen identities to breach organizations, impersonating employees or contractors before stealing data and launching ransomware, according to new research.

therecord.media/microsoft-wa...

Microsoft warns of a 32% surge in identity hacks, mainly driven by stolen passwords

Hackers are also increasingly turning to other methods to obtain credentials. Microsoft tracked surges in the use of infostealer malware by criminals and an increase of IT scams where cybercriminals c...

therecord.media

HorXi @horxi.bsky.social · 2d

A DLR Dornier 228 research aircraft was used as a mobile node in a quantum network.

interestingengineering.com/science/quan...

Researchers transmit photons from moving plane in major quantum leap

Germany's QuNET initiative proves the feasibility of sending quantum-encoded photons from a plane.

interestingengineering.com

HorXi @horxi.bsky.social · 2d

Now, researchers have announced they have successfully developed end-to-end encryption for git services that can ensure security with little impact on performance.

www.sydney.edu.au/news-opinion...

Scientists develop end to end encryption for git services

www.sydney.edu.au

HorXi @horxi.bsky.social · 2d

New Technology is Able to Infer the Identity of Individuals without a WiFi Device on Them through passively recording communication in Radio Networks – Researchers Warn of Risks to Privacy and Call for Protective Measures

www.kit.edu/kit/english/...

KIT - KIT - Media - Press Releases - PI 2025 - The Spy Who Came in from the WiFi: Beware of Radio Network Surveillance!

www.kit.edu

HorXi @horxi.bsky.social · 2d

With just $800 in basic equipment, researchers found a stunning variety of data—including thousands of T-Mobile users’ calls and texts and even US military communications—sent by satellites unencrypted.

www.wired.com/story/satell...

Satellites Are Leaking the World’s Secrets: Calls, Texts, Military and Corporate Data

With just $800 in basic equipment, researchers found a stunning variety of data—including thousands of T-Mobile users’ calls and texts and even US military communications—sent by satellites unencrypte...

www.wired.com

HorXi @horxi.bsky.social · 3d

Florida on Tuesday sued the smart television company Roku for collecting and selling children’s sensitive data, including information showing precise geolocation, without notice and parental consent.

therecord.media/florida-roku...

Florida sues Roku for illegally selling children’s data, including precise geolocation

The Florida attorney general's office sued the smart television company Roku for collecting and selling children’s sensitive data, including information showing precise geolocation, without notice and...

therecord.media

HorXi @horxi.bsky.social · 3d

Australian airline Qantas confirmed that hackers have recently published data they stole in a cyberattack this summer.

therecord.media/qantas-cyber...

Qantas confirms cybercriminals released stolen customer data

The Australian airline Qantas confirmed that hackers have published customer data they stole by exploiting Salesforce technology.

therecord.media

HorXi @horxi.bsky.social · 3d

The U.S. Justice Department seized about $15 billion worth of bitcoin from accounts allegedly linked to the chairman of a prominent Cambodian conglomerate, who was indicted on charges that his company is behind a sprawling scamming empire.

therecord.media/feds-sanctio...

Feds sanction Cambodian conglomerate over cyber scams, seize $15 billion from chairman

The Treasury Department targeted the company, Prince Group, and 146 associated people and entities with sanctions.

therecord.media

HorXi @horxi.bsky.social · 3d

Taiwan’s top intelligence agency is warning that China is intensifying cyberattacks and online disinformation campaigns aimed at eroding public trust in government institutions and deepening divisions within the island’s democracy.

therecord.media/taiwan-nsb-r...

Taiwan reports surge in Chinese cyber activity and disinformation efforts

Taiwan’s National Security Bureau says network intrusions and influence operations by China have increased this year, with critical infrastructure drawing the most attention.

therecord.media

1

HorXi @horxi.bsky.social · 4d

Nearly three months ago, Daniel Stenberg, creator of the widely used curl utility, complained about the overwhelming flood of low-quality AI-generated vulnerability reports, calling them “AI slop.”

cybernews.com/security/cur...

From “AI slop” to 50 bug fixes: the curl maintainer’s turnaround

Despite initial complaints about low-quality AI-generated vulnerability reports, Daniel Stenberg, the creator of curl, now acknowledges that AI led to 50 bug fixes.

cybernews.com

HorXi @horxi.bsky.social · 4d

It’s not exactly clear what the impact is going to be, but the announcement by LockBit, DragonForce, and Qilin – three of the biggest names in the world of ransomware and data extortion – certainly sounds menacing.

cybernews.com/security/loc...

Report: LockBit, Qilin, DragonForce join forces as ransomware cartel

According to ReliaQuest, the newly returned LockBit has formed a coalition with prominent RaaS groups DragonForce and Qilin, a partnership poised to drive more frequent and effective ransomware attack...

cybernews.com

HorXi @horxi.bsky.social · 4d

Instagram users are panicking after discovering a serious privacy glitch that lets people outside their “Close Friends” list see and even reply to private Notes meant only for select followers.

cybernews.com/privacy/inst...

Instagram glitch exposes private notes | Cybernews

Instagram’s Close Friends glitch exposed private Notes to outsiders, alarming users and raising new privacy concerns about Meta’s social media platform.

cybernews.com

HorXi @horxi.bsky.social · 4d

After recently attacking Salesforce, the hacking conglomerate Scattered LAPSUS$ Hunters is claiming it has breached a series of major international corporations, including Dell and Verizon.

cybernews.com/cybercrime/s...

Scattered LAPSUS$ Hunters claims Dell, Telstra, other major firms

The group, which is a conglomerate of three previously separate cybercrime gangs, has stolen data from companies across the technology, aviation, and telecommunications sectors.

cybernews.com

HorXi @horxi.bsky.social · 4d

Cybersecurity authorities are urging organizations to patch a critical zero-day bug in Oracle’s E-Business Suite (EBS) that’s already being actively exploited. The flaw enables unauthenticated attackers to run code remotely.

cybernews.com/security/hac...

Authorities urge patching Oracle EBS: hackers gaining complete control

Cybersecurity authorities are urging organizations to immediately patch a critical, zero-day vulnerability in Oracle’s E-Business Suite.

cybernews.com

HorXi @horxi.bsky.social · 5d

Germany will vote against the EU's controversial proposal to scan private digital messages for child sexual abuse material (CSAM), a move that is expected to derail the legislation across the bloc.

www.computing.co.uk/news/2025/le...

Germany rejects EU's ‘Chat Control’ law, likely killing it

Germany will vote against the EU's controversial proposal to scan private digital messages for child sexual abuse material (CSAM), a move that is expected to ...

www.computing.co.uk

1

HorXi @horxi.bsky.social · 5d

Researchers from NC State University have identified the first hardware vulnerability that allows attackers to compromise the data privacy of artificial intelligence (AI) users

news.ncsu.edu/2025/10/ai-p...

Hardware Vulnerability Allows Attackers to Hack AI Training Data

Researchers have identified the first vulnerability that allows attackers to compromise the data privacy of AI users by exploiting the physical hardware on which AI is run.

news.ncsu.edu

1 1

HorXi @horxi.bsky.social · 5d

This week, Google has launched an AI Vulnerability Reward Program dedicated to security researchers who find and report flaws in the company's AI systems.

www.bleepingcomputer.com/news/google/...

Google's new AI bug bounty program pays up to $30,000 for flaws

This week, Google has launched an AI Vulnerability Reward Program dedicated to security researchers who find and report flaws in the company's AI systems.

www.bleepingcomputer.com

HorXi @horxi.bsky.social · 5d

Teachers’ and students’ use of artificial intelligence in K-12 classrooms is increasing at a rapid pace, prompting serious concerns about the potentially negative effects on students, a new report concludes.

www.edweek.org/technology/r...

Rising Use of AI in Schools Comes With Big Downsides for Students

A report by the Center for Democracy and Technology looks at teachers' and students' experiences with the technology.

www.edweek.org