News
Delinea Secret Server customers should apply latest patches
Customers of Delinea's Secret Server are being urged to upgrade their installations "immediately" after a researcher claimed a critical vulnerability could allow attackers to gain admin-level access.…
US senator wants to put the brakes on Chinese EVs
Electric vehicles may become a new front in America's tech war with China after a US senator called for Washington DC to block Chinese-made EVs to protect domestic industries and national security.…
Identifying third-party risk
Webinar Cybercriminals are always on the hunt for new ways to breach your privacy, and busy supply chains often look like a good way to get in under the wire.…
US House approves FISA renewal – warrantless surveillance and all
Infosec in brief US Congress nearly killed a reauthorization of FISA Section 702 last week over concerns that it would continue to allow warrantless surveillance of Americans, but an amendment to require a warrant failed to pass.…
Zero-day exploited right now in Palo Alto Networks' GlobalProtect gateways
Palo Alto Networks on Friday issued a critical alert for an under-attack vulnerability in the PAN-OS software used in its firewall-slash-VPN products.…
Google One VPN axed for everyone but Pixel loyalists ... for now
In an incredibly rare move, Google is killing off one of its online services – this time, VPN for Google One.…
Microsoft breach allowed Russian spies to steal emails from US government
The US Cybersecurity and Infrastructure Security Agency (CISA) warns that Russian spies who gained access to Microsoft's email system were able to steal sensitive data, including authentication details and that immediate remedial action is required by affected agencies.…
French issue <em>alerte rouge</em> after local governments knocked offline by cyber attack
Several French municipal governments' services have been knocked offline following a "large-scale cyber attack" on their shared servers.…
Apple stops warning of 'state-sponsored' attacks, now alerts about 'mercenary spyware'
Apple has made a significant change to the wording of its threat notifications, opting not to attribute attacks to a specific source or perpetrator, but categorizing them broadly as "mercenary spyware."…
Space Force boss warns 'the US will lose' without help from Musk and Bezos
The commander of the US Space Force (USSF) has warned that America risks losing its dominant position in space, and therefore on Earth too.…
96% of US hospital websites share visitor info with Meta, Google, data brokers
Hospitals – despite being places where people implicitly expect to have their personal details kept private – frequently use tracking technologies on their websites to share user information with Google, Meta, data brokers, and other third parties, according to research published today.…
Global taxi software vendor exposes details of nearly 300K across UK and Ireland
Exclusive Taxi software biz iCabbi recently fixed an issue that exposed the personal information of nearly 300,000 individuals via an unprotected database.…
It's 2024 and Intel silicon is still haunted by data-spilling Spectre
Intel CPU cores remain vulnerable to Spectre data-leaking attacks, say academics at VU Amsterdam.…
Rust rustles up fix for 10/10 critical command injection bug on Windows
Programmers are being urged to update their Rust versions after the security experts working on the language addressed a critical vulnerability that could lead to malicious command injections on Windows machines.…
X fixes URL blunder that could enable convincing social media phishing campaigns
Elon Musk's X has apparently fixed an embarrassing issue implemented earlier in the week that royally bungled URLs on the social media platform formerly known as Twitter.…
Turning the tide on third-party risk
Webinar There are some unhappy projections out there about the prevalence of third-party security breaches.…
Chrome Enterprise Premium promises extra security – for a fee
Cloud Next Hoping to upsell freeloading corporate users of its Chrome browser, Google has announced Chrome Enterprise Premium – which comes with a dash of AI security sauce for just $6 per user per month.…
Microsoft squashes SmartScreen security bypass bug exploited in the wild
Patch Tuesday Microsoft fixed 149 security flaws in its own products this week, and while Redmond acknowledged one of those vulnerabilities is being actively exploited, we've been told another hole is under attack, too.…
Got an unpatched LG 'smart' television? It could be watching you back
A handful of bugs in LG smart TVs running WebOS could allow an attacker to bypass authorization and gain root access on the device.…
UK businesses shockingly unaware of how to handle security threats
UK businesses' response to security breaches has "astounded" experts following the release of the government's official cybercrime stats for 2024.…