October 2023

Canon claims its nanoimprint litho machines capable of 5nm chip production 14/10/2023 at 01:47 By Tobias Mann Probably not a threat to ASML’s EUV tech just yet, analyst tells El Reg When it comes to producing the most advanced chips, Dutch semiconductor manufacturing equipment maker ASML has had the market on lock. However, fresh lithography […]

EPA flushes water supply cybersecurity rule after losing legal fight with industry, states 14/10/2023 at 01:02 By Jessica Lyons Hardcastle What could possibly go wrong? American public water systems may or may not be safe from cybercriminals and spies — we may not actually know unless or until these systems are compromised, now that the

Biden hopes to squeeze loopholes to slow Chinese importation of AI chips 13/10/2023 at 23:02 By Tobias Mann Might slow things down a bit, and that’s it The Biden administration’s next round of sanctions could close a loophole that has enabled Chinese companies to buy export-controlled technologies, including AI processors, through outside suppliers and subsidiaries.…

530K people’s info feared stolen from cloud PC gaming biz Shadow 13/10/2023 at 22:02 By Jessica Lyons Hardcastle Will players press start to continue with this outfit? Shadow, which hosts Windows PC gaming in the cloud among other services, has confirmed criminals stole a database containing customer data following a social-engineering attack against one of

Bungled ransomware raid targeting WS_FTP servers demanded just 0.018 BTC 13/10/2023 at 21:17 By Connor Jones First attempt to exploit latest Progress Software bug spotted in the wild The first ransomware campaign against organizations using the vulnerability in Progress Software’s WS_FTP Server was this week spotted by security researchers.… This article is an excerpt from

Unveiling the CAPTCHA Escape: The Dance of CAPTCHA Evasion Using TOR 13/10/2023 at 20:46 By Medz Barao In this era, threat actors have proven to be tireless in their pursuit of exploiting vulnerabilities and gaining unauthorized access to online platforms using anything from simple to sophisticated attacks. Today, we delve into shedding light on how

18% of African banking apps have vulnerable high severity secrets 13/10/2023 at 20:31 By The security of African financial service applications were analyzed in a recent report by Approov, finding sensitive data was left vulnerable. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Three dozen plaintiffs join Apple AirTag tracking lawsuit in amended complaint 13/10/2023 at 20:17 By Brandon Vigliarolo 38 people now accusing Apple of negligence over stalking, assaults and murders enabled by Bluetooth trackers A lawsuit filed in December that accuses Apple of negligence over its failure to prevent AirTags from being abused by stalkers has

HTTP/2 Rapid Reset 13/10/2023 at 20:16 By Medz Barao A recent vulnerability tracked as Rapid Reset (CVE-2023-44487) in the HTTP/2 protocol was recently disclosed by researchers and vendors. It was exploited in the wild from August 2023 to October 2023. This article is an excerpt from SpiderLabs Blog View Original Source

MariaDB ditches products and staff in restructure, bags $26.5M loan to cushion fall 13/10/2023 at 19:32 By Lindsay Clark Strategic DBaaS and distributed back end jettisoned after years of promotion MariaDB is ditching strategic products and cutting 28 percent of the workforce as it struggles to overcome the financial challenges its faced since floating on

Vulnerability management for an appsec world 13/10/2023 at 19:16 By The problem with common vulnerability and exposure lists, however, is that the vulnerabilities being generated in modern applications aren’t known. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Calls for Visual Studio security tweak fall on deaf ears despite one-click RCE exploit 13/10/2023 at 18:32 By Connor Jones Two years on and Microsoft refuses to address the issue Perceived weaknesses in the security of Microsoft’s Visual Studio IDE are being raised once again this week with a fresh single-click exploit.… This article is

New PEAPOD Cyberattack Campaign Targeting Women Political Leaders 13/10/2023 at 18:31 By European Union military personnel and political leaders working on gender equality initiatives have emerged as the target of a new campaign that delivers an updated version of RomCom RAT called PEAPOD. Cybersecurity firm Trend Micro attributed the attacks to a threat actor it tracks

Can open source be saved from the EU’s Cyber Resilience Act? 13/10/2023 at 17:47 By Steven J. Vaughan-Nichols The road to Hell is paved with good intentions, and for open source this is a well meaning cluster fudge Opinion  When I was in Bilbao recently for the Open Source Summit Europe event, the main topic