Intel confirms leak of Alder Lake BIOS source code.

Views expressed in the cybersecurity, cybercrime, and cyber espionage update are those of the reporters and correspondents.  Accessed on 10 October 2022, 1349 UTC. Content provided by "Security News Bundle" via https://feedly.com.

Source:  https://feedly.com/i/collection/content/user/f401222a-bca6-4c45-9cc1-183f239e8d86/category/7737d3c9-5fe2-4b34-8708-85e57085f895

Please click link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net and https://paper.li/RussellRoberts).  This later link discusses machine learning, artificial intelligence, IoT, and information security.

Security News Bundle

18

MOST POPULAR

Intel Confirms Leak of Alder Lake BIOS Source Code

Intel Alder Lake Code

•

84The Hacker News / 2h

Chipmaker Intel has confirmed that proprietary source code related to its Alder Lake CPUs has been leaked, following its release by an unknown third-party on 4chan and GitHub last week. The published content contains Unified Extensible Firmware Interface (UEFI) code for Alder Lake, the company's 12th generation processors that was originally launched in November 2021. In a statement shared with

Fortinet Customers Told to Urgently Patch Remotely Exploitable Vulnerability

SecurityWeek / 2h

Fortinet has privately informed some customers about a critical and remotely exploitable vulnerability that poses a significant risk. read more

Singtel confirms digital burglary at Dialog subsidiary

Singtel Optus CA Dialog

•

The Register – Security / 2h

Second of Singapore telco's Australian businesses to be prised open by criminals in weeks Singtel has confirmed that another Australian business it owns, consulting unit Dialog, has fallen victim to a cyber burglary just weeks after the mammoth data leak at telco Optus was revealed.…

TODAY

Several Horner PLC Software Vulnerabilities Allow Code Execution via Malicious Font Files

SecurityWeek / 17min

A cybersecurity researcher has discovered a total of seven high-severity remote code execution vulnerabilities in Horner Automation’s Cscape product and they can all be exploited using malicious font files. read more

Second Australia-Based Singtel Subsidiary Hacked

Singtel Dialog Optus

•

SecurityWeek / 17min

Hackers have attacked a second subsidiary of Singapore Telecommunications Ltd (Singtel), the company said Monday, but analysts said it appeared the Southeast Asian telecom giant was not being specifically targeted. read more

The head of the Federal Cyber Security Authority (BSI) faces dismissal

Security Affairs / 22min

The German Interior Minister wants to dismiss the head of the Federal Cyber Security Authority (BSI), Arne Schoenbohm, due to possible contacts with Russian security services. German Interior Minister Nancy Faeser wants to dismiss the head of the Federal Cyber Security Authority (BSI), Arne Schoenbohm, due to possible contact with people involved with Russian security services. The news was repor

It’s 2022 and consumers are only now getting serious about cybersecurity

The Register – Security / 1h

US consumers start to get the message about protecting themselves online End users, often viewed by infosec specialists as a corporation's weakest link, appear to be finally understanding the importance of good security and privacy practices.…

Critical Remote Code Execution Vulnerability Found in vm2 Sandbox Library

SecurityWeek / 1h

A critical vulnerability in vm2 may allow a remote attacker to escape the sandbox and execute arbitrary code on the host. A highly popular JavaScript sandbox library with more than 16 million monthly downloads, vm2 supports the execution of untrusted code synchronously in a single process. read more

Hacking group POLONIUM uses ‘Creepy’ malware against Israel

BleepingComputer / 1h

Security researchers reveal previously unknown malware used by the cyber espionage hacking group 'POLONIUM,' threat actors who appear to target Israeli organizations exclusively. [...]

Hackers Steal $100 Million Cryptocurrency from Binance Bridge

Binance BNB Chain BSC

•

63The Hacker News / 2h

BNB Chain, a blockchain linked to the Binance cryptocurrency exchange, disclosed an exploit on a cross-chain bridge that drained around $100 million in digital assets. "There was an exploit affecting the native cross-chain bridge between BNB Beacon Chain (BEP2) and BNB Smart Chain (BEP20 or BSC), known as 'BSC Token Hub,'" it said last week. "The exploit was through a sophisticated forging of

Android Security Updates Patch Critical Vulnerabilities

SecurityWeek / 2h

The October 2022 security updates for Android started rolling out last week with patches for roughly 50 vulnerabilities, including a critical-severity flaw in the Framework component. read more

German Cybersecurity Chief to be Sacked Over Alleged Russia Ties: Sources

SecurityWeek / 2h

Germany is planning to fire Arne Schoenbohm, the head of the BSI national cyber security agency, after reports he had contacts with Russian intelligence services, government sources told AFP on Monday. The interior ministry said