Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

3 headlines in this view

Refine the feed

Search across headline titles and summaries.

Volume over time

Weekly headline count for the current query.

Showing 3 most recent headlines Filtered view

Encryption protects content, not context Mischief-makers can guess the subjects being discussed with LLMs using a side-channel attack, according to Microsoft researchers. They told The Register that models from some providers, including Anthropic, AWS, DeepSeek, and Google, haven't been fixed, putting both personal users and enterprise communications at risk.…

More from The Register 11 Nov 2025, 1:09 p.m. Amazon Web Services Encryption Fixed Google Microsoft Research Side-Channel
The Register 3 years, 7 months ago

AWS fixes 'confused deputy' vulnerability in AppSync

Datadog security researchers found the flaw before miscreants did Amazon Web Services (AWS) fixed a cross-tenant flaw in AWS AppSync that could allow miscreants to abuse that cloud service to assume identity and access management roles in other AWS accounts, and then gain access to and control over those resources. …

More from The Register 23 Nov 2022, 11:01 a.m. Abuse Amazon (company) Amazon Web Services Cloud Fixed Flaw Identity and Access Management Research Vulnerability

Lightspin threat researchers discovered the bug, which AWS fixed A local file read vulnerability in Amazon's Relational Database Service (RDS) could be exploited to allow an attacker to gain access to internal AWS credentials, the cloud behemoth has confirmed.…

More from The Register 13 Apr 2022, 6:05 a.m. Amazon (company) Amazon Web Services Cloud Credentials Database Fixed Research Vulnerability