2023

Apple demands app makers explain use of sensitive APIs 29/07/2023 at 12:24 By Thomas Claburn Privacy ritual aims to deter fingerprinting of the iFaithful Apple has told developers writing apps for its shiny stuff that they will soon have to explain why their programs use certain sensitive APIs.… This article is an excerpt from The

New Android Malware CherryBlos Utilizing OCR to Steal Sensitive Data 29/07/2023 at 11:31 By A new Android malware strain called CherryBlos has been observed making use of optical character recognition (OCR) techniques to gather sensitive data stored in pictures. CherryBlos, per Trend Micro, is distributed via bogus posts on social media platforms and comes with capabilities to steal

RFP Template for Browser Security 29/07/2023 at 09:21 By Increasing cyber threats and attacks have made protecting organizational data a paramount concern for businesses of all sizes. A group of experts have recognized the pressing need for comprehensive browser security solutions and collaborated to develop “The Definitive Browser Security RFP Template.” This resource helps streamline the

Apple Sets New Rules for Developers to Prevent Fingerprinting and Data Misuse 29/07/2023 at 09:21 By Apple has announced plans to require developers to submit reasons to use certain APIs in their apps starting later this year with the release of iOS 17, iPadOS 17, macOS Sonoma, tvOS 17, and watchOS 10 to prevent their

Hackers Deploy “SUBMARINE” Backdoor in Barracuda Email Security Gateway Attacks 29/07/2023 at 08:32 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday disclosed details of a “novel persistent backdoor” called SUBMARINE deployed by threat actors in connection with the hack on Barracuda Email Security Gateway (ESG) appliances. “SUBMARINE comprises multiple artifacts — including a SQL

Ivanti Warns of Another Endpoint Manager Mobile Vulnerability Under Active Attack 29/07/2023 at 07:45 By Ivanti has disclosed yet another security flaw impacting Endpoint Manager Mobile (EPMM), formerly known as MobileIron Core, that it said has been weaponized as part of an exploit chain by malicious actors in the wild. The new vulnerability, tracked as CVE-2023-35081 (CVSS

Florida man accused of hoarding America’s secrets faces fresh charges 29/07/2023 at 04:03 By Thomas Claburn Mar-a-Lago IT director told ‘the boss wanted the server deleted’ Federal prosecutors have expanded their criminal case against a famous Floridian and his loyal minions for allegedly mishandling national security secrets and not being forthright about the storage and

Millions of people’s data stolen because web devs forget to check access perms 29/07/2023 at 03:17 By Jessica Lyons Hardcastle IDORs of the storm Personal, financial, and health information belonging to millions of folks has been stolen via a particular class of website vulnerability, say cybersecurity agencies in the US and Australia. They’re urging developers

Biden urged to completely cripple AI chips to China 29/07/2023 at 01:32 By Tobias Mann Give them Z80s, Joe, and tell ’em to like it Some American lawmakers aren’t happy with US efforts to limit exports of AI chips to China, and have called on the Biden administration to enact tighter controls.… This article is

School for semiconductors? Arm tries to address chip talent shortages 29/07/2023 at 00:20 By Dan Robinson US, Europe and China all rushing to create next gen of experts and upskill existing workforce Chip designer Arm is looking to address the shortage of vital skills in the semiconductor industry with an initiative that aims to help

FBI boss: Congress must renew Section 702 spy powers – that’s how we get nearly all our cyber intel 28/07/2023 at 23:02 By Jessica Lyons Hardcastle Also: China’s ‘got a bigger hacking program than that of every major nation combined’ Nearly all of the FBI’s technical intelligence on malicious “cyber actors” in the first half

Chinese companies evade sanctions, fuel Moscow’s war on Ukraine, says report 28/07/2023 at 22:32 By Laura Dobberstein PRC semiconductor exports curiously rose 19% y-o-y for first 9 months of 2022 Chinese companies, including state-owned defense companies, are evading tech sanctions and fueling Moscow’s war in Ukraine, according to a US report released on Thursday.… This

Legislation introduced to designate space as critical infrastructure 28/07/2023 at 22:20 By Congress members and the California Aerospace Caucus co-chairs introduced legislation to designate space systems as critical infrastructure. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

FTC warns against online tracking technology for healthcare providers 28/07/2023 at 21:45 By Hospitals and telehealth providers have been warned by the FTC and the Office for Civil Rights (OCR) regarding online tracking technology. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New report highlights the rise of IPv6 in cybercriminal activities 28/07/2023 at 21:17 By A new report reveals some of the top emerging cybersecurity threats and trends worldwide. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Latest version of Canonical’s Wayland compositor arrives 28/07/2023 at 21:02 By Liam Proven Mir 2.14 and its easily installable sibling Miriway Canonical is still working away on its own Mir display server, used in several of its IoT product lines. Version 2.14 gains more functionality useful for full desktop environments.… This article is an excerpt

Creator of the Unix Sysadmin Song explains he just wanted to liven up a textbook 28/07/2023 at 19:34 By Iain Thomson When you get to Chapter 14 of a Unix book you’re ready for a laugh In more than a few IT departments, or more likely in the pub on Friday night, there will be