Security Saturday — the vulnerabilities, advisories, and incidents from the past week worth knowing about.
Security
- Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers (The Hacker News)
Attacker-controlled instructions can make Atlassian's Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an outside server. Two security firms found that behavior independently, by different rou - New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens (The Hacker News)
New research shows content inside an email can escape its message boundary and interfere with the webmail interface. Across attack chains spanning Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL Mail, the techniques can capture p - Friday Squid Blogging: Arctic Bobtail Squid Video (Schneier on Security)
Nice video of the Arctic bobtail squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy. - ICE Is Buying Access to Credit Card Records (Schneier on Security)
Through data brokers, ICE is buying the information you provided to open a credit card. - Canadian Man Pleads Guilty in Snowflake Extortions (KrebsOnSecurity)
A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud data storage
Enjoying these roundups?
Subscribe for daily follow-ups on AI news, trending open-source tools, and Security Saturdays.
Subscribe free →