2024

Feds pull plug on domains linked to import of Chinese gun conversion devices 2024-09-13 at 05:01 By Laura Dobberstein Illegal goods allegedly shipped to the US labeled as toys or jewels The US Attorney’s Office in the District of Massachusetts has seized more than 350 internet domains allegedly used by Chinese outfits to sell US

Fortinet admits miscreant got hold of customer data in the cloud 2024-09-13 at 04:01 By Iain Thomson That would explain this 440GB leak, then Fortinet has admitted that bad actors accessed cloud-hosted data about its customers, but insisted it was a “limited number” of files. The question is: how limited is “limited”?… This article is

‘Hadooken’ Linux malware targets Oracle WebLogic servers 2024-09-13 at 03:46 By Jessica Lyons Nastyware seeks creds, mines crypto, and plants ransomware that isnt deployed – for now? An unknown attacker is exploiting weak passwords to break into Oracle WebLogic servers and deploy an emerging Linux malware called Hadooken, according to researchers from cloud security outfit

Musk’s Starlink dominance raises FCC concerns on competition 2024-09-13 at 01:16 By Brandon Vigliarolo SpaceX now accounts for nearly two-thirds of all active satellites in orbit When Elon Musk’s Starlink hit its 7,000th satellite milestone, it’s unlikely he expected the FCC chair to suggest his space dominance might be stifling competition—but here we are.… This

Unity scraps hated runtime fees, hits devs with subscription hikes instead 2024-09-13 at 00:31 By Brandon Vigliarolo Insert coin to continue Unity has decided to scrap its hated runtime fees and return to the old ways of billing, along with making some considerable price hikes.… This article is an excerpt from The Register View Original

I stole 20GB of data from Capgemini – and now I’m leaking it, says cyber-crook 2024-09-13 at 00:01 By Jessica Lyons Allegedly pilfered database has source code, private keys, staff info, T-Mobile VM logs, more A miscreant claims to have broken into Capgemini and leaked a large amount of sensitive data stolen from the technology

Google sued for using trademarked Gemini name for AI service 2024-09-12 at 23:03 By Thomas Claburn Even the chatbot allegedly admits to infringement claim Gemini Data, which offers an enterprise AI platform, has sued Google for calling its own AI service by the same name.… This article is an excerpt from The Register View Original

Mastercard splurges $2.65B on another big cyber buy – Recorded Future 2024-09-12 at 22:16 By Iain Thomson The startup is already the go-to intel shop for 45 govs and half the Fortune 100 Mastercard has added another security asset to its growing portfolio, laying down $2.65 billion for threat intelligence giant Recorded Future.… This article

Adobe patches Acrobat bug, neglects to mention whole zero-day, exploit thing 2024-09-12 at 21:31 By Connor Jones SaaS seller sets severity to ‘critical’ Adobe’s patch for a remote code execution (RCE) bug in Acrobat doesn’t mention that the vulnerability is considered a zero-day nor that a proof-of-concept (PoC) exploit exists, a researcher warns.… This article

Boeing to launch quantum comms satellite testbed in 2026 2024-09-12 at 20:32 By Brandon Vigliarolo After Starliner stumbles, the aerospace giant eyes a new frontier – entanglement swapping in space Undeterred by the problems of its Starliner crewed space capsule, Boeing has a plan to do a bit of uncrewed science – launching a satellite

New Android Malware ‘Ajina.Banker’ Steals Financial Data and Bypasses 2FA via Telegram 2024-09-12 at 20:16 By Bank customers in the Central Asia region have been targeted by a new strain of Android malware codenamed Ajina.Banker since at least November 2024 with the goal of harvesting financial information and intercepting two-factor authentication (2FA) messages. Singapore-headquartered Group-IB,

Urgent: GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Job Execution 2024-09-12 at 20:16 By GitLab on Wednesday released security updates to address 17 security vulnerabilities, including a critical flaw that allows an attacker to run pipeline jobs as an arbitrary user. The issue, tracked as CVE-2024-6678, carries a CVSS score of 9.9 out of a

Google Chrome gets a mind of its own for some security fixes 2024-09-12 at 19:08 By Thomas Claburn Browser becomes more proactive about trimming unneeded permissions and deceptive notifications Google has enhanced Chrome’s Safety Check so that it can make some security decisions on the user’s behalf.… This article is an excerpt from The Register