22 Mar

Chinese snoops use F5, ConnectWise bugs to sell access into top US, UK networks

Chinese spies exploited a couple of critical-severity bugs in F5 and ConnectWise equipment earlier this year to sell access to compromised US defense organizations, UK

Author rabih
22 Mar

Fujitsu: Miscreants infected our systems with malware, may have stolen customer info

Fujitsu has confirmed that miscreants have compromised some of its internal computers, deployed malware, and may have stolen some customer information. In a March 15

Author rabih
22 Mar

3 million doors open to uninvited guests in keycard exploit

Around 3 million doors protected by popular keycard locks are thought to be vulnerable to security flaws that allow miscreants to quickly slip into locked

Author rabih
22 Mar

Hardware-level Apple Silicon vulnerability can leak cryptographic keys

Apple is having its own Meltdown/Spectre moment with a new side-channel vulnerability found in the architecture of Apple Silicon processors that gives malicious apps the

Author rabih
22 Mar

NVD slowdown leaves thousands of vulnerabilities without analysis data

Opinion The United States National Institute of Standards and Technology (NIST) has almost completely stopped adding analysis to Common Vulnerabilities and Exposures (CVEs) listed in

Author rabih
22 Mar

AceCryptor attacks surge in Europe – Week in security with Tony Anscombe

Video The second half of 2023 saw massive growth in AceCryptor-packed malware spreading in the wild, including courtesy of multiple spam campaigns where AceCryptor packed

Author rabih
22 Mar

Truck-to-truck worm could infect – and disrupt – entire US commercial fleet

Vulnerabilities in common Electronic Logging Devices (ELDs) required in US commercial trucks could be present in over 14 million medium- and heavy-duty rigs, according to

Author rabih
21 Mar

FBI v the bots: Feds urge denial-of-service defense after critical infrastructure alert

The US government has recommended a series of steps that critical infrastructure operators should take to prevent distributed-denial-of-service (DDoS) attacks. Thursday’s alert comes just days

Author rabih
21 Mar

Microsoft faces bipartisan criticism for alleged censorship on Bing in China

Microsoft is the subject of growing criticism in the US over allegations that its Bing search engine censors results for users in China that relate

Author rabih
21 Mar

Congress votes unanimously to ban brokers selling American data to enemies

The US House of Representatives has passed a bill that would prohibit data brokers from selling Americans’ data to foreign adversaries with an unusual degree

Author rabih
21 Mar

Yacht dealer to the stars attacked by Rhysida ransomware gang

The Rhysida ransomware group claims it was responsible for the cyberattack at US luxury yacht dealer MarineMax earlier this month. MarineMax, which posted multibillion-dollar revenues

Author rabih
21 Mar

Protecting Model Updates in Privacy-Preserving Federated Learning

In our second post we described attacks on models and the concepts of input privacy and output privacy. ln our last post, we described horizontal

Author rabih
21 Mar

UK council won’t say whether two-week ‘cyber incident’ impacted resident data

Leicester City Council continues to battle a suspected ransomware attack while keeping schtum about the key details. Progress updates posted to its website are still

Author rabih
21 Mar

Exposed: Chinese smartphone farms that run thousands of barebones mobes to do crime

Chinese upstarts are selling smartphone motherboards – and kit to run and manage them at scale – to operators of outfits that use them to

Author rabih
21 Mar

It’s 2024 and North Korea’s Kimsuky gang is exploiting Windows Help files

North Korea’s notorious Kimsuky cyber crime gang has commenced a campaign using fresh tactics, according to infosec tools vendor Rapid7. A Wednesday post explains that

Author rabih
20 Mar

It’s tax season, and scammers are a step ahead of filers, Microsoft says

As the digital wolves dress in sheep’s tax forms, Microsoft has thrown a spotlight on a crafty 2024 phishing expedition, unraveled in January, that preys

Author rabih
20 Mar

US task force aims to plug security leaks in water sector

US government is urging state officials to band together to improve the cybersecurity of the country’s water sector amid growing threats from foreign adversaries. The

Author rabih
20 Mar

London Clinic probes claim staffer tried to peek at Princess Kate’s records

The London Clinic where the Princess of Wales had surgery at the start of this year says it is investigating claims that an employee had

Author rabih
Load moreLoadingAll items loaded