13 Dec

North Korea’s fake IT worker scam hauled in at least $88 million over six years

North Korea’s fake IT worker scams netted the hermit kingdom $88 million over six years, according to the US Department of Justice, which thinks it’s

Author rabih
12 Dec

Black Hat Europe 2024: Can AI systems be socially engineered?

Digital Security Could attackers use seemingly innocuous prompts to manipulate an AI system and even make it their unwitting ally? Tony Anscombe 12 Dec 2024

Author rabih
12 Dec

Apache issues patches for critical Struts 2 RCE bug

We now know the remote code execution vulnerability in Apache Struts 2 disclosed back in November carries a near-maximum severity rating following the publication of

Author rabih
12 Dec

Lights out for 18 more DDoS booters in pre-Christmas Operation PowerOFF push

The Europol-coordinated Operation PowerOFF struck again this week as cross-border cops pulled the plug on 27 more domains tied to distributed denial of service (DDoS)

Author rabih
12 Dec

British Army zaps drones out of the sky with laser trucks

The British Army has successfully destroyed flying drones for the first time using a high-energy laser mounted on an armored vehicle. If perfected, the technology could form

Author rabih
12 Dec

Firefox ditches Do Not Track because nobody was listening anyway

When Firefox 135 is released in February, it’ll ship with one less feature: Mozilla plans to remove the Do Not Track toggle from its Privacy

Author rabih
12 Dec

Citrix goes shopping in Europe and returns with gifts for security-conscious customers

Citrix has gone on a European shopping trip, and come home with its bag of gifts bulging thanks to a pair of major buys: infosec

Author rabih
11 Dec

Blocking Chinese spies from intercepting calls? There ought to be a law

US telecoms carriers would be required to implement minimum cyber security standards and ensure their systems are not susceptible to hacks by nation-state attackers –

Author rabih
11 Dec

Krispy Kreme Doughnut Corporation admits to hole in security

Doughnut slinger Krispy Kreme has admitted to an attack that has left many customers unable to order online. According to a mandatory 8-K filing [PDF],

Author rabih
11 Dec

Three more vulns spotted in Ivanti CSA, all critical, one 10/10

Ivanti just put out a security advisory warning of three critical vulnerabilities in its Cloud Services Application (CSA), including a perfect 10. CSA is a

Author rabih
11 Dec

US names Chinese national it alleges was behind 2020 attack on Sophos firewalls

The US Departments of Treasury and Justice have named a Chinese business and one of its employees as the actors behind the 2020 exploit of

Author rabih
10 Dec

Microsoft holds last Patch Tuesday of the year with 72 gifts for admins

Microsoft hasn’t added too much coal to the stocking this Patch Tuesday, with just 72 fixes, only one of which scored more than nine on

Author rabih
10 Dec

US military grounds entire Osprey tiltrotor fleet over safety concerns

The US Navy, Air Force, and Marine Corps have grounded their fleet of Boeing-Bell-made Osprey V-22s on safety grounds. A spokesperson for the Naval Air

Author rabih
10 Dec

AMD secure VM tech undone by DRAM meddling

Researchers have found that the security mechanism AMD uses to protect virtual machine memory can be bypassed with $10 of hardware – and perhaps not

Author rabih
10 Dec

Fully patched Cleo products under renewed ‘zero-day-ish’ mass attack

Researchers at security shop Huntress are seeing mass exploitation of a vulnerability affecting three Cleo file management products, even on patched systems. Cleo issued patches

Author rabih
10 Dec

Heart surgery device maker’s security bypassed, data encrypted and stolen

A manufacturer of devices used in heart surgeries says it’s dealing with “a cybersecurity incident” that bears all the hallmarks of a ransomware attack. Artivion,

Author rabih
10 Dec

How cyber-secure is your business? | Unlocked 403 cybersecurity podcast (ep. 8)

Video, Business Security As cybersecurity is a make-or-break proposition for businesses of all sizes, can your organization’s security strategy keep pace with today’s rapidly evolving

Author rabih
10 Dec

Bitfinex heist gets the Netflix treatment after ‘cringey couple’ sentenced

A documentary examining the 2016 Bitfinex burglars hits Netflix, bringing the curious case to living rooms for the first time. Biggest Heist Ever covers the

Author rabih
Load moreLoadingAll items loaded