16 Jan

Bankrupt scooter startup left one private key to rule them all

An Estonian e-scooter owner locked out of his own ride after the manufacturer went bust did what any determined engineer might do. He reverse-engineered it,

Author rabih
16 Jan

Probably not the best security in the world: Carlsberg wristbands spill visitor pics

Exclusive The Carlsberg exhibition in Copenhagen offers a bunch of fun activities, like blending your own beer, and the Danish brewer lets you relive those

Author rabih
16 Jan

Why LinkedIn is a hunting ground for threat actors – and how to protect yourself

Social Media The business social networking site is a vast, publicly accessible database of corporate information. Don’t believe everyone on the site is who they

Author rabih
15 Jan

Cisco finally fixes max-severity bug under active attack for weeks

Cisco finally delivered a fix for a maximum-severity bug in AsyncOS that has been under attack for at least a month. The networking giant disclosed

Author rabih
15 Jan

Chinese spies used Maduro’s capture as a lure to phish US govt agencies

What policy wonk wouldn’t want to click on an attachment promising to unveil US plans for Venezuela? Chinese cyberspies used just such a lure to

Author rabih
15 Jan

Flipping one bit leaves AMD CPUs open to VM vuln

If you use virtual machines, there’s reason to feel less-than-Zen about AMD’s CPUs. Computer scientists affiliated with the CISPA Helmholtz Center for Information Security in

Author rabih
15 Jan

Contagious Claude Code bug Anthropic ignored promptly spreads to Cowork

Anthropic’s tendency to wave off prompt-injection risks is rearing its head in the company’s new Cowork productivity AI, which suffers from a Files API exfiltration

Author rabih
15 Jan

A simple CodeBuild flaw put every AWS environment at risk – and pwned ‘the central nervous system of the cloud’

A critical misconfiguration in AWS’s CodeBuild service allowed complete takeover of the cloud provider’s own GitHub repositories and put every AWS environment in the world

Author rabih
15 Jan

US regulator tells GM to hit the brakes on customer tracking

The Federal Trade Commission has banned General Motors and subsidiary OnStar from sharing drivers’ precise location and behavior data with consumer reporting agencies for five

Author rabih
15 Jan

Woman bailed as cops probe doctor’s surgery data breach

The UK’s West Midlands Police has released a woman on bail as part of an investigation into a data breach at a Walsall general practitioner’s

Author rabih
15 Jan

Microsoft taps UK courts to dismantle cybercrime host RedVDS

Microsoft has taken its cybercrime fight to the UK in its first major civil action outside the US, moving to shut down RedVDS, a virtual

Author rabih
15 Jan

Ofcom keeps X under the microscope despite Grok ‘nudify’ fix

Ofcom is continuing with its investigation into X, despite the social media platform saying it will block Grok from digitally undressing people. A spokesperson for

Author rabih
15 Jan

AWS flips switch on Euro cloud as customers fret about digital sovereignty

Amid continued trade and geopolitical volatility between Europe and the US, Amazon Web Services is making its European Sovereign Cloud generally available today and plans

Author rabih
14 Jan

CrowdStrike shareholders lose battle to recoup losses from 2024 outage

A group of CrowdStrike shareholders who sued the company over losses sustained following its 2024 global outage will have to head back to the drawing

Author rabih
14 Jan

New Linux malware targets the cloud, steals creds, and then vanishes

A brand-new Linux malware named VoidLink targets victims’ cloud infrastructure with more than 30 plugins that allow attackers to perform a range of illicit activities,

Author rabih
14 Jan

France fines telcos €42M for sub-par security prior to 24M customer breach

The French data protection regulator, CNIL, today issued a collective €42 million ($48.9 million) fine to two French telecom companies for GDPR violations stemming from

Author rabih
14 Jan

‘Imagination the limit’: DeadLock ransomware gang using smart contracts to hide their work

Researchers at Group-IB say the DeadLock ransomware operation is using blockchain-based anti-detection methods to evade defenders’ attempts to analyze their tradecraft. First spotted in July

Author rabih
14 Jan

Cyber-stricken Belgian hospitals refuse ambulances, transfer critical patients

Two hospitals in Belgium have cancelled surgeries and transferred critical patients to other facilities after shutting down servers following a cyberattack. AZ Monica, which operates

Author rabih
Load moreLoadingAll items loaded