CyberInsider پنجشنبه ۷ آبان ۱۴۰۵ · ۲۰:۱۵

Steam flaws enabled zero-click code execution between logged-in PCs

Valve’s Steam platform was susceptible to zero-click remote code execution between computers signed into the same account. The findings were detailed by Atredis Partners researcher Bryan Alexander in an October 28 report, following a partial presentation at BSides PDX 2026. The team released proof-of-concept code and reported all the issues through Valve’s HackerOne program. Atredis … The post Steam flaws enabled zer…

Read the full article at CyberInsider Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

CyberInsider پنجشنبه ۷ آبان ۱۴۰۵ · ۲۰:۲۶

‘SMS of Death’ flaw cuts off Android calls without user interaction

A malformed text message can silently crash Android’s telephony service and disconnect calls, including emergency calls. Repeated delivery can leave affected phones unable to maintain cellular service even after restarting. Independent researcher Mark Blaszczyk published the findings on October 29, nearly six months after reporting the issue to Google. His disclosure says Google ultimately classified … The post ‘SMS…

Mobile Development

منبع

CyberInsider پنجشنبه ۷ آبان ۱۴۰۵ · ۱۶:۲۰

iRhythm’s June data breach has impacted over 8.18 million people

Cardiac monitoring company iRhythm suffered a data breach affecting 8,179,772 people, according to a federal filing that puts the incident’s impact far above the hundreds of thousands identified in earlier reporting. The US Department of Health and Human Services’ Office for Civil Rights (HHS OCR) now lists 8,179,772 affected individuals. Earlier coverage, based on state … The post iRhythm’s June data breach has impa…

Data Breach

منبع

CyberInsider پنجشنبه ۷ آبان ۱۴۰۵ · ۱۲:۰۷

Chrome extensions with 13.4 million users funnel searches through tracking servers

319 Chrome extensions with a combined user count of roughly 13.4 million redirect searches through operator-controlled servers to generate revenue from Yahoo and Bing referrals. Socket traced the operations using extension listings, landing pages, privacy policies, and advertising records, alongside data from Censys, urlscan, and DecryptAds. Many extensions were promoted as PDF tools, manual finders, … The post Chrom…

Privacy

منبع

CyberInsider چهارشنبه ۶ آبان ۱۴۰۵ · ۲۰:۴۴

NIST publishes post-quantum migration roadmap with 2030 deadline

The US National Institute of Standards and Technology (NIST) has finalized its roadmap for transitioning to post-quantum cryptography. The announcement outlines how organizations should replace vulnerable algorithms and meet federal migration deadlines beginning in 2030. The report, Transition to Post-Quantum Cryptography Standards (NIST IR 8547), identifies the cryptographic standards affected by future quantum atta…

Cryptography

منبع