News

Microsoft reportedly cuts China's early access to bug disclosures, PoC exploit code

The Register - Thu, 21/08/2025 - 23:58
Better late than never after SharePoint assault?

Microsoft has reportedly stopped giving Chinese companies proof-of-concept exploit code for soon-to-be-disclosed vulnerabilities following last month's SharePoint zero-day attacks, which appear to be related to a leak in Redmond's early-bug-notification program.…

Categories: News

'Impersonation as a service' the next big thing in cybercrime

The Register - Thu, 21/08/2025 - 23:11
Underground forums now recruiting English-speaking social engineers

English speakers adept at social engineering are a hot commodity in the cybercrime job market.…

Categories: News

Honey, I shrunk the image and now I'm pwned

The Register - Thu, 21/08/2025 - 22:24
Google’s Gemini-powered tools tripped up by image-scaling prompt injection

Security researchers with Trail of Bits have found that Google Gemini CLI and other production AI systems can be deceived by image scaling attacks, a well-known adversarial challenge for machine learning systems.…

Categories: News

Congressman proposes bringing back letters of marque for cyber privateers

The Register - Thu, 21/08/2025 - 19:45
Bill would let US President commission white hat hackers to go after foreign threats, seize assets on the online seas

It's been more than 200 years since the United States issued a letter of marque allowing privateers to attack the vessels of foreign nations, but those letters may return to empower cyber operators if a bill introduced in Congress actually manages to pass. …

Categories: News

Orange Belgium mega-breach exposes 850K customers to serious fraud

The Register - Thu, 21/08/2025 - 15:07
Everything a criminal needs for targeted attacks exposed, but telco insists 'no critical data compromised'

A significant data theft at Orange Belgium has opened hundreds of thousands of its customers to serious cybersecurity risks.…

Categories: News

US cops wrap up RapperBot, one of world's biggest DDoS-for-hire rackets

The Register - Thu, 21/08/2025 - 14:26
Feds say Mirai-spawned botnet blasted 370K attacks before AWS and pals helped yank its servers

RapperBot, a botnet-for-hire blamed for hundreds of thousands of DDoS attacks, has been yanked offline by the Feds, who also hauled in its alleged Oregon-based mastermind.…

Categories: News

Apple rushes out fix for active zero-day in iOS and macOS

The Register - Thu, 21/08/2025 - 13:26
Another 'extremely sophisticated' exploit chewing at Cupertino's walled garden

Apple has shipped emergency updates to fix an actively exploited zero-day in its ImageIO framework, warning that the flaw has already been abused in targeted attacks.…

Categories: News

Colt changes tune, admits data theft as Warlock gang begins auction

The Register - Thu, 21/08/2025 - 13:01
Worried about your data? Not to worry, we'll check the dark web for you! Yes really

A week after its services were disrupted by a cyberattack, UK telco Colt Technology Services has gone back on its initial statement to confirm that data has indeed been stolen.…

Categories: News

Pages

Subscribe to Sec Tec Limited aggregator - News