Steam flaws enabled zero-click code execution between logged-in PCs

Valve’s Steam platform was susceptible to zero-click remote code execution between computers signed into the same account. The findings were detailed by Atredis Partners researcher Bryan Alexander in an October 28 report, following a partial presentation at BSides PDX 2026. The team released proof-of-concept code and reported all the issues through Valve’s HackerOne program. Atredis … The post Steam flaws enabled zer…

خواندن متن کامل در CyberInsider درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
CyberInsider

Trezor warns users to move funds after suspected spy implant report

Trezor is urging customers who bought hardware wallets supplied by CryptoBilis from March 2026 onward to move their cryptocurrency to new wallets. The warning follows a credible report of a suspected hardware implant in a Trezor Safe 5. The company has not yet received the device for examination, and no CryptoBilis customer has reported stolen … The post Trezor warns users to move funds after suspected spy implant re…

CyberInsider

Reddit to require login to access content, citing scraping and ad targeting

Reddit plans to become a primarily logged-in service, moving away from two decades of largely open browsing. The platform says this will improve personalization, strengthen advertising, and restrict unauthorized data scraping. CEO Steve Huffman, posting as u/spez in an announcement titled “About that login screen,” said testing will begin in selected markets outside the United … The post Reddit to require login to ac…

CyberInsider

Binance links $6.3 billion security incident to compromised laptop

Binance says a compromised DevOps engineer’s laptop may have enabled an attacker to submit unauthorized withdrawals in a security incident with an estimated impact of $6.3 billion. The cryptocurrency exchange says it has frozen approximately $3 billion in affected assets on-chain and pledged to cover all losses. Withdrawals remain suspended while Binance overhauls its withdrawal … The post Binance links $6.3 billion…

CyberInsider

‘SMS of Death’ flaw cuts off Android calls without user interaction

A malformed text message can silently crash Android’s telephony service and disconnect calls, including emergency calls. Repeated delivery can leave affected phones unable to maintain cellular service even after restarting. Independent researcher Mark Blaszczyk published the findings on October 29, nearly six months after reporting the issue to Google. His disclosure says Google ultimately classified … The post ‘SMS…