News
Spectre haunts CPUs again: VMSCAPE vulnerability leaks cloud secrets
If you thought the world was done with side-channel CPU attacks, think again. ETH Zurich has identified yet another Spectre-based transient execution vulnerability that affects AMD Zen CPUs and Intel Coffee Lake processors by breaking virtualization boundaries.…
Senator blasts Microsoft for 'dangerous, insecure software' that helped pwn US hospitals
Microsoft is back in the firing line after US Senator Ron Wyden accused Redmond of shipping "dangerous, insecure software" that helped cybercrooks cripple one of America's largest hospital networks.…
Brussels faces privacy crossroads over encryption backdoors
Europe, long seen as a bastion of privacy and digital rights, will debate this week whether to enforce surveillance on citizens' devices.…
Attacker steals customer data from Brit rail operator LNER during break-in at supplier
One of the UK's largest rail operators, LNER, is the latest organization to spill user data via a third-party data breach.…
Experts scrutinized Ofcom's Online Safety Act governance. They're concerned
Industry experts expressed both concern and sympathy for Ofcom, the Brit regulator that is overseeing the Online Safety Act, as questions mount over the effectiveness of the controversial legislation.…
BAE Systems surfaces autonomous submarine for military use
Following a series of trials, defense biz BAE Systems says it is readying an autonomous military submarine for the end of next year.…
NASA bars Chinese citizens from its facilities, networks, even Zoom calls
NASA has barred Chinese nationals from accessing its premises and assets, even those who hold visas that permit them to reside in the USA.…
Beijing went to 'EggStreme' lengths to attack Philippines military, researchers say
‘EggStreme’ framework looks like the sort of thing Beijing would find handy in its ongoing territorial beefs Infosec outfit Bitdefender says it’s spotted a strain of in-memory malware that looks like the work of Chinese advanced persistent threat groups that wanted to achieve persistent access at a “military company” in the Philippines.…
Akira ransomware crims abusing trifecta of SonicWall security holes for extortion attacks
Affiliates of the Akira ransomware gang are again exploiting a critical SonicWall vulnerability abused last summer, after a suspected zero-day flaw actually turned out to be related to a year-old bug.…
Apple slips up on ChillyHell macOS malware, lets it past security . . . for 4 years
ChillyHell, a modular macOS backdoor believed to be long dormant, has likely been infecting computers for years while flying under the radar, according to security researchers who spotted a malware sample uploaded to VirusTotal in May.…
Jaguar Land Rover U-turns to confirm 'some data' affected after cyber prang
Jaguar Land Rover (JLR) says "some data" was affected after the luxury car maker suffered a digital break-in early last week.…
Uncle Sam indicts alleged ransomware kingpin tied to $18B in damages
A Ukrainian national faces serious federal charges and an $11 million bounty after allegedly orchestrating ransomware operations that caused an estimated $18 billion in damages across hundreds of organizations worldwide.…
Flu jab email mishap exposes hundreds of students' personal data
A clumsy data breach has affected hundreds of children at a Birmingham secondary school.…
Cybercrooks ripped the wheels off at Jaguar Land Rover. Here's how not to get taken for a ride
Feature Jaguar Land Rover (JLR) is the latest UK household name to fall victim to a major cyberattack. IT systems across multiple sites have been offline for over a week after what the company described as a "severe disruption."…
This Patch Tuesday, SAP is the worst offender and Microsoft users can kinda chill
September’s Patch Tuesday won’t require Microsoft users to rapidly repair rancid software, but SAP users need to move fast to address extremely dangerous bugs.…
More packages poisoned in npm attack, but would-be crypto thieves left pocket change
During the two-hour window on Monday in which hijacked npm versions were available for download, malware-laced packages reached one in 10 cloud environments, according to Wiz researchers. But crypto-craving crims did little more than annoy defenders.…
New cybersecurity rules land for Defense Department contractors
It's about to get a lot harder for private companies that are lax on cybersecurity to get a contract with the Pentagon, as the Defense Department has finalized a rule requiring contractor compliance with its Cybersecurity Maturity Model Certification (CMMC) program.…
Defense Dept didn't protect social media accounts, left stream keys out in public
The US Department of Defense, up until this week, routinely left its social media accounts wide open to hijackers via stream keys - unique, confidential identifiers generated by streaming platforms for broadcasting content. If exposed, these keys can allow attackers to output anything they want from someone else's channel.…
No gains, just pains as 1.6M fitness phone call recordings exposed online
Exclusive Sensitive info from hundreds of thousands of gym customers and staff – including names, financial details, and potentially biometric data in the form of audio recordings – was left sitting in an unencrypted, non-password protected database, according to a security researcher who shut it down.…
What the Plex? Streaming service suffers yet another password spill
Streaming platform Plex is warning some users to reset their passwords after suffering yet another breach.…
Pages
