2024

Turning Jenkins Into a Cryptomining Machine From an Attacker’s Perspective

Turning Jenkins Into a Cryptomining Machine From an Attacker’s Perspective 2024-07-05 at 12:02 By In this blog entry, we will discuss how the Jenkins Script Console can be weaponized by attackers for cryptomining activity if not configured properly. This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source

Turning Jenkins Into a Cryptomining Machine From an Attacker’s Perspective Read More »

Europol says mobile roaming tech is making its job too hard

Europol says mobile roaming tech is making its job too hard 2024-07-05 at 11:31 By Connor Jones Privacy measures apparently helping criminals evade capture Top Eurocops are appealing for help from lawmakers to undermine a privacy-enhancing technology (PET) they say is hampering criminal investigations – and it’s not end-to-end encryption this time. Not exactly.… This

Europol says mobile roaming tech is making its job too hard Read More »

Infostealing malware masquerading as generative AI tools

Infostealing malware masquerading as generative AI tools 2024-07-05 at 08:01 By Help Net Security Over the past six months, there has been a notable surge in Android financial threats – malware targeting victims’ mobile banking funds, whether in the form of ‘traditional’ banking malware or, more recently, cryptostealers, according to ESET. Vidar infostealer targets Windows

Infostealing malware masquerading as generative AI tools Read More »

Polyfill[.]io Attack Impacts Over 380,000 Hosts, Including Major Companies

Polyfill[.]io Attack Impacts Over 380,000 Hosts, Including Major Companies 2024-07-05 at 08:01 By The supply chain attack targeting widely-used Polyfill[.]io JavaScript library is wider in scope than previously thought, with new findings from Censys showing that over 380,000 hosts are embedding a polyfill script linking to the malicious domain as of July 2, 2024. This

Polyfill[.]io Attack Impacts Over 380,000 Hosts, Including Major Companies Read More »

99% of IoT exploitation attempts rely on previously known CVEs

99% of IoT exploitation attempts rely on previously known CVEs 2024-07-05 at 07:31 By Help Net Security The explosion of Internet of Things (IoT) devices has brought about a wide range of security and privacy challenges, according to Bitdefender and NETGEAR. The report is based on global telemetry of 3.8 million homes and 50 million

99% of IoT exploitation attempts rely on previously known CVEs Read More »

New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks

New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks 2024-07-05 at 07:31 By Cybersecurity researchers have uncovered a new botnet called Zergeca that’s capable of conducting distributed denial-of-service (DDoS) attacks. Written in Golang, the botnet is so named for its reference to a string named “ootheca” present in the command-and-control (C2) servers (“ootheca[.]pw” and “ootheca[.]top”).

New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks Read More »

47% of corporate data stored in the cloud is sensitive

47% of corporate data stored in the cloud is sensitive 2024-07-05 at 07:01 By Help Net Security As the use of the cloud continues to be strategically vital to many organizations, cloud resources have become the biggest targets for cyberattacks, with SaaS applications (31%), cloud storage (30%) and cloud management infrastructure (26%) cited as the

47% of corporate data stored in the cloud is sensitive Read More »

Organizations weigh the risks and rewards of using AI

Organizations weigh the risks and rewards of using AI 2024-07-05 at 06:31 By Help Net Security 78% of organizations are tracking AI as an emerging risk while simultaneously adopting the technology themselves, according to AuditBoard. Organizations prioritize AI risk assessment The report, based on a survey of over 400 security professionals in the US involved

Organizations weigh the risks and rewards of using AI Read More »

New infosec products of the week: July 5, 2024

New infosec products of the week: July 5, 2024 2024-07-05 at 06:01 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from LogRhythm, NordVPN, Regula, and Scythe. LogRhythm’s enhancements boost analyst efficiency This quarter, LogRhythm is highlighting its Machine Data Intelligence (MDI) Fabric for the AI-ready

New infosec products of the week: July 5, 2024 Read More »

Kindle sputters out: Amazon’s e-readers couldn’t download content for a day or more

Kindle sputters out: Amazon’s e-readers couldn’t download content for a day or more 2024-07-05 at 05:46 By Simon Sharwood Support line reports ‘high volume of contacts’ about the problem Owners of Amazon’s Kindle e-reader devices looking for something new to read may have had to pick up an actual book – the old-school kind, made

Kindle sputters out: Amazon’s e-readers couldn’t download content for a day or more Read More »

We’ve banned Chinese telco kit and drones. Next: mountain bikes?

We’ve banned Chinese telco kit and drones. Next: mountain bikes? 2024-07-05 at 04:01 By Laura Dobberstein DJI builds a power pack for off-road two-wheelers Nations worried about China’s ability to use its tech companies for more than trade now have a new class of kit to fret over: mountain bikes, thanks to Middle Kingdom drone-maker

We’ve banned Chinese telco kit and drones. Next: mountain bikes? Read More »

Atos shuffles debt around as curtain call nears for restructuring saga

Atos shuffles debt around as curtain call nears for restructuring saga 2024-07-04 at 19:46 By Dan Robinson Investors will be hoping so anyway Crisis-prone IT services outfit Atos says it is among the top 11 percent of companies in the industry – at least when it comes to environmental, social, and governance (ESG) risks –

Atos shuffles debt around as curtain call nears for restructuring saga Read More »

California Advances Unique Safety Regulations for AI Companies Despite Tech Firm opposition

California Advances Unique Safety Regulations for AI Companies Despite Tech Firm opposition 2024-07-04 at 19:46 By Associated Press Lawmakers voted to advance legislation that would require AI companies to test their systems and add safety measures to prevent them from being potentially manipulated for malicious purposes. The post California Advances Unique Safety Regulations for AI

California Advances Unique Safety Regulations for AI Companies Despite Tech Firm opposition Read More »

AST SpaceMobile promises the Moon with seamless satellite phone service

AST SpaceMobile promises the Moon with seamless satellite phone service 2024-07-04 at 16:01 By Dan Robinson Yet all its birds remain resolutely earthbound AST SpaceMobile has reiterated its plans to enable a satellite phone service covering the entire continental US that will work seamlessly with existing devices, thanks to spectrum sharing agreements with AT&T and

AST SpaceMobile promises the Moon with seamless satellite phone service Read More »

Experimental Mir-based tiling WM is winning acceptance outside Ubuntopia

Experimental Mir-based tiling WM is winning acceptance outside Ubuntopia 2024-07-04 at 15:01 By Liam Proven Miracle-WM takes several more steps forward The Miracle-WM tiling window manager for Canonical’s Mir display server has hit 0.3 – and also reaches places you may not expect to find Canonical code.… This article is an excerpt from The Register

Experimental Mir-based tiling WM is winning acceptance outside Ubuntopia Read More »

Datacenter demand driven by AI… but constrained by power shortages

Datacenter demand driven by AI… but constrained by power shortages 2024-07-04 at 13:46 By Dan Robinson Not content with drinking up all our water, now we’ll compete with DCs for power Demand for datacenter space is currently at a high in many markets around the globe because of the AI boom, despite issues with securing

Datacenter demand driven by AI… but constrained by power shortages Read More »

Scroll to Top