The Breach News

New ‘Lazy FP State Restore’ Vulnerability Discovered in All Modern Intel CPUs

Title: New Vulnerability Discovered in Intel Processors Poses Major Security Risk A newly identified security vulnerability affecting Intel processors has raised alarms among cybersecurity professionals. This vulnerability, known as Lazy FP State Restore (CVE-2018-3665), impacts the speculative execution technology utilized in Intel Core and Xeon processors, a mechanism previously targeted…

Read MoreNew ‘Lazy FP State Restore’ Vulnerability Discovered in All Modern Intel CPUs

The Pentagon Investigates Data Breach Potentially Exposing National Security Officials

Data Breach at Dialog Exposes Sensitive Information of US Intelligence Personnel A significant data breach at Dialog, a private events organization co-founded by Peter Thiel, has compromised the personal information of numerous US national security officials, including a member of the National Security Council (NSC) and an active-duty intelligence officer…

Read MoreThe Pentagon Investigates Data Breach Potentially Exposing National Security Officials

Google Developer Uncovers Major Vulnerability in Modern Web Browsers

Severe Vulnerability Discovered in Modern Browsers Could Expose Sensitive Data A significant security vulnerability affecting contemporary web browsers has been identified, posing a serious risk to users by enabling malicious websites to access sensitive information from logged-in accounts across different platforms. This alarming discovery was made by Jake Archibald, a…

Read MoreGoogle Developer Uncovers Major Vulnerability in Modern Web Browsers

Two Zero-Day Vulnerabilities Discovered Following Upload of ‘Unarmed’ Proof of Concept to VirusTotal

Microsoft Uncovers Critical Zero-Day Vulnerabilities Targeting Adobe and Windows Kernel Recent disclosures from Microsoft security researchers have revealed two significant zero-day vulnerabilities that were identified after a malicious PDF file surfaced on VirusTotal. These vulnerabilities were promptly patched before they could be exploited in real-world scenarios. In late March, ESET…

Read MoreTwo Zero-Day Vulnerabilities Discovered Following Upload of ‘Unarmed’ Proof of Concept to VirusTotal

British Police Developed a Comprehensive Crime Prediction System, Yet Some Results Are Unreliable

“I don’t think an AI model should have that kind of power over people’s lives,” Pegram states. Photograph: Alice Zoo In a recent disclosure following public records requests by WIRED, the Avon and Somerset Police revealed a substantial body of performance data for 13 risk models utilized from 2017 to…

Read MoreBritish Police Developed a Comprehensive Crime Prediction System, Yet Some Results Are Unreliable

New Bluetooth Vulnerability Impacts Millions of Devices from Leading Manufacturers

Critical Bluetooth Vulnerability Exposed: What Businesses Need to Know A significant security concern has emerged regarding Bluetooth technology, with the discovery of a critical vulnerability that can impact various devices. This flaw could enable an unauthenticated attacker with physical proximity to intercept, monitor, or manipulate traffic between affected devices. The…

Read MoreNew Bluetooth Vulnerability Impacts Millions of Devices from Leading Manufacturers

Suspected Cyber Attack Triggers Fake Emergency Alerts on Phones Throughout Brazil

Brazil’s emergency alert system was temporarily taken offline last week following a suspected cyberattack that sent false warnings to residents across multiple regions. The incident occurred in the early hours of Saturday, when citizens began receiving an Extreme Alert text message with the term “misantropi4,” a variant of the Portuguese…

Read MoreSuspected Cyber Attack Triggers Fake Emergency Alerts on Phones Throughout Brazil

Apache Tomcat Addresses Critical Security Vulnerabilities

The Apache Software Foundation (ASF) has issued critical security updates to mitigate multiple vulnerabilities in its widely used Tomcat application server. These updates specifically address an important information disclosure flaw that could enable a remote attacker to gain access to sensitive information. Apache Tomcat functions as an open-source web server…

Read MoreApache Tomcat Addresses Critical Security Vulnerabilities