Connexion
'Underminr' CDN Vulnerability Hides Malicious Traffic Behind Trusted Domains
Slashdot reader wiredmikey writes: Threat actors are exploiting a vulnerability in shared content delivery network (CDN) infrastructure to hide connections to malicious domains. Researchers say the vulnerability could impact roughly 88 million domains and can bypass DNS filtering and protective DNS controls, potentially enabling stealthy command-and-control communications and other evasive attacks.
Dubbed "Underminr," the exploit "presents the SNI and HTTP Host of a domain," writes SecurityWeek, "while forcing a request to the IP address of another tenant on the same shared edge."
The mismatch, ADAMnetworks reports, has been exploited in attacks targeting large-scale hosting providers, including those that have implemented mitigations against domain fronting...
Threat actors' increased reliance on AI is expected to lead to a surge in attacks. "Once Underminr becomes parametric information for AI-generated malware, we could expect to see it in every attack that needs to evade protective DNS as part of the attack chain," ADAMnetworks CEO David Redekop says.
Read more of this story at Slashdot.
NVIDIA a présenté ses résultats financiers pour le premier trimestre fiscal 2027 récemment. Une nouvelle fois, l’entreprise a établi de nouveaux records : elle a engrangé 81,6 milliards de dollars sur la période, en hausse de 85 % en glissement annuel... 
Après la pandémie et une demande décuplée, voici un troisième fléau susceptible de perturber le marché en affectant les lignes de production de Samsung : un mouvement social ! Des rebelles sud-coréens lors d'un rassemblement devant le campus de Samsung à Pyeongtaek, le 23 avril. (Chung Sung-Jun /Getty Images... 
Le marché mondial des matériaux pour semi-conducteurs continue de grimper. En 2025, il atteint 73,2 milliards de dollars, en hausse de 6,8 % sur un an, selon le rapport Materials Market Data Subscription (MMDS) de SEMI... 