February 13th, 2025

Cyber Mornings Daily · Feb 13, 2025 · 14m

A critical vulnerability in Nvidia's container software could allow attackers to gain root privileges on host servers by mounting the host’s root filesystem into a container, granting unrestricted access to all of the host’s files. This flaw affects AI applications running the vulnerable container toolkit, whether in the cloud or on-premises. Additionally, North Korean hackers are using a social engineering tactic called ClickFix, which involves deceiving victims into executing malicious PowerShell commands with administrative privileges, leading to malware infections. These attacks often…