Slashdot

News for nerds, stuff that matters

'Underminr' CDN Vulnerability Hides Malicious Traffic Behind Trusted Domains

Slashdot reader wiredmikey writes: Threat actors are exploiting a vulnerability in shared content delivery network (CDN) infrastructure to hide connections to malicious domains. Researchers say the vulnerability could impact roughly 88 million domains and can bypass DNS filtering and protective DNS controls, potentially enabling stealthy command-and-control communications and other evasive attacks.

Dubbed "Underminr," the exploit "presents the SNI and HTTP Host of a domain," writes SecurityWeek, "while forcing a request to the IP address of another tenant on the same shared edge."

The mismatch, ADAMnetworks reports, has been exploited in attacks targeting large-scale hosting providers, including those that have implemented mitigations against domain fronting...

Threat actors' increased reliance on AI is expected to lead to a surge in attacks. "Once Underminr becomes parametric information for AI-generated malware, we could expect to see it in every attack that needs to evade protective DNS as part of the attack chain," ADAMnetworks CEO David Redekop says.

Read more of this story at Slashdot.

Wel.nl

Minder lezen, Meer weten.

VS-minister Rubio optimistisch over voorlopig akkoord met Iran

NEW DELHI (ANP/AFP) - De Amerikaanse minister van Buitenlandse Zaken Marco Rubio is optimistisch over een voorlopige deal met Iran en hoopt dat die zondag nog kan worden aangekondigd.

Hij zei dat op bezoek in India, dat voor veel belangrijke importgoederen is aangewezen op scheepvaart door de Straat van Hormuz. Die is sinds de Amerikanen en Israëli's eind februari Iran begonnen aan te vallen, vrijwel gesloten.

Rubio denkt dat "het mogelijk is dat de wereld in de komende uren goed nieuws krijgt". President Donald Trump zei eerder al dat de inhoud van een memorandum van overeenkomst tussen Iran en de VS voor het grootste deel rond is. Hij zei dat daarmee de zeestraat weer geopend wordt. Hij zei niet onder welke voorwaarden dat zou gebeuren en wat de overeenkomst verder bevat.

De voorlopige overeenkomst zou uitgaan van een bestand van zestig dagen. Dan zou de zeestraat opengaan en de blokkade van Iraanse schepen stoppen. Nucleaire kwesties zouden tijdens het bestand aan de orde komen.


Persoon overleden door brand in seniorencomplex Den Haag

DEN HAAG (ANP) - Door de brand zaterdagnacht in een seniorencomplex aan de Wagenstraat in het centrum van Den Haag is een dode gevallen. Dat zegt een woordvoerder van de politie. De overledene is de bewoner van de woning waar de brand uitbrak. Eerder meldde de veiligheidsregio nog dat er geen gewonden waren.

Toen de brandweer aankwam, sloegen de vlammen al uit de woning op de derde etage van het seniorencomplex. Rond 02.00 uur was de brand onder controle. De oorzaak van de brand is nog onbekend. De politie laat weten onderzoek te doen als het pand veilig genoeg is om te betreden.

Bewoners van het complex zijn in de nacht opgevangen in een nabijgelegen hotel en later in de moskee aan de overkant van de straat.


Rijnmond - Nieuws

Het laatste nieuws van vandaag over Rotterdam, Feyenoord, het verkeer en het weer in de regio Rijnmond

Tom (58) is een furry en koos een paard als karakter: 'Ik kon wel wat spanning gebruiken'

Rotterdammer Tom Geller (58) maakt al bijna dertig jaar deel uit van de 'furry community'. Een furry is geïnteresseerd in dieren met menselijke eigenschappen. Een deel van de gemeenschap kleedt zich zelfs als dier. “Mij brengt deze groep gemeenschapszin”, zegt hij.

The Register

Biting the hand that feeds IT — Enterprise Technology News and Analysis

No captain, my captain: Navantia floats crewless warship

Shipbuilder Navantia has put forward a design for an uncrewed warship intended to complement existing naval vessels in what has been dubbed a "hybrid navy," although it may not be an exact fit for any current requirements. Developed by the UK arm of the Spanish firm, the Large Autonomous Surface Vessel, or LASV75, is basically a large seagoing drone that is armed like a conventional warship. As its name suggests, the LASV75 is 75 meters long, making it about half as long as one of the Royal Navy's Type 45 destroyers and closer in size to one of the River-class patrol vessels, with a displacement of about 1,000 tonnes. It is designed to be entirely uncrewed, with no bridge or crew spaces, and adaptable for different missions via a modular design. Promotional images also show the vessel carrying several shipping containers, which have become a common way for navies to quickly add extra capabilities to a vessel. According to Navantia, the design allows for construction of the drone at pace and scale, and it is expected to cost significantly less than crewed warships, although the company did not specify exactly how quickly or cheaply it could be built. The modularity extends to both mission payloads and engineering systems, Navantia told us, allowing the LASV75 to be tailored to the roles required, from installed power to weapons and sensor capability. A prominent feature is a mast designed to host a number of sensor configurations, but we were puzzled by the apparent lack of funnels for engine exhaust. The ship is equipped with Integrated Full Electric Power and Propulsion (IFEP), Navantia said, meaning it uses diesel generators to drive electric motors and power everything else aboard. It has waterline exhausts. The LASV75 was designed to meet the Royal Navy's concept of a hybrid navy, but also to serve wider demand for autonomous vessels. Its size will enable it to have the range and endurance for task group operations in the open ocean, the company claims, so it can undertake escort duties or support the Royal Navy's Atlantic Bastion strategy to protect undersea infrastructure around the UK, such as cables and pipelines, and to track Russian submarines. The vessel could potentially meet the requirement for a Type 92 sloop that the Royal Navy outlined for Atlantic Bastion, effectively an uncrewed ship that can patrol the North Atlantic looking out for submarines. This role is currently filled by the Type 23 frigate, and will be taken by the Type 26 when that comes into service, but the expectation is that a flotilla of uncrewed Type 92 vessels would allow for greater uninterrupted coverage of the ocean. "Autonomous vessels are fundamental to the future of sovereign defence capabilities. Naval capabilities of the future will comprise a hybrid mixture of crewed warships with uncrewed escorts and ancillary ships," said Derek Jones, Navantia UK chief commercial and business development officer. "At Navantia UK, we're investing heavily in our four shipyards to turn them into ideal partners to deliver this vision of the future." The company is currently building the Fleet Solid Support (FSS) vessels for the Royal Fleet Auxiliary, which will provide supplies to Royal Navy ships at sea. ®

De Speld

Uw vaste prik voor betrouwbaar nieuws.

Pinksteren kan beginnen nadat Paus heilige woorden uitspreekt: ‘Commando Pinksteren’

​Traditiegetrouw sprak de Paus vanochtend op het Sint-Pietersplein in Vaticaanstad zijn Urbi et Orbi-zegen uit. Ook luidde hij zoals ieder jaar het Pinksterweekend in met de heilige woorden: “Commando Pinksteren”.

Nadat de Paus op zeer plechtige wijze het Commando Pinksteren had uitgesproken, volgden nog een aantal commando’s, waaronder commando psalm, commando bidden en commando biecht.

Voorafgaand aan de toespraak van de Paus was er nog wat lichte commotie op het plein. Een lid van de Zwitserse Garde was al Pinksteren aan het vieren terwijl Paus Leo XIV nog geen ‘commando’ had gezegd. Hij is af.

&


The Guardian

Latest news, sport, business, comment, analysis and reviews from the Guardian, the world's leading liberal voice

Premier League finale with survival on line for Spurs and West Ham – matchday live

⚽ News, discussion and buildup before the day’s action
Fans’ verdicts: the season review | And email us here

And later today, Bolton take on Stockport County in the League One play-off final.

At the beginning of May, Dominic Booth sat down with Stockport manager Dave Challinor and it includes one of the most remarkable stats I’ve ever read. In Challinor’s 16 years as a manager, his team has finished in a play-off spot or higher in 15 of them!

Continue reading...

UK judge’s decision not to jail boys for rape like a ‘rock straight in my face’, says victim, 16

Boys, aged 15, given youth rehabilitation orders for two separate attacks against two girls in Hampshire

A judge’s decision not to jail two teenage boys who raped two girls has been described by one of the victims as a “rock straight in my face”.

A trial at Southampton crown court heard the girls were raped in two separate attacks in Fordingbridge, Hampshire, the first attack on 26 November 2024 and the second on 17 January 2025.

Continue reading...

VK: Voorpagina

Volkskrant.nl biedt het laatste nieuws, opinie en achtergronden

Autoriteiten verlagen dodental van explosie in Chinese kolenmijn, ramp blijft zwaarste sinds 2009

The Moscow Times - Independent News From Russia

The Moscow Times offers everything you need to know about Russia: Breaking news, top stories, business, analysis, opinion, multimedia

Russian Director Zvyagintsev Denounces Ukraine War ‘Carnage' at Cannes Awards

Zvyagintsev's “Minotaur” was among the frontrunners for the Palme d'Or top prize for best film in Cannes, finishing with the second-place Grand Prix award.