2024

Critical Jenkins Vulnerability Exposes Servers to RCE Attacks – Patch ASAP! 2024-01-25 at 14:32 By The maintainers of the open-source continuous integration/continuous delivery and deployment (CI/CD) automation software Jenkins have resolved nine security flaws, including a critical bug that, if successfully exploited, could result in remote code execution (RCE). The issue, assigned the CVE identifier CVE-2024-23897, […]

React to this headline:

LODEINFO Fileless Malware Evolves with Anti-Analysis and Remote Code Tricks 2024-01-25 at 14:32 By Cybersecurity researchers have uncovered an updated version of a backdoor called LODEINFO that’s distributed via spear-phishing attacks. The findings come from Japanese company ITOCHU Cyber & Intelligence, which said the malware “has been updated with new features, as well as changes to the anti-analysis (analysis

React to this headline:

UK Civil Aviation Authority ponders vertiports for flying taxis 2024-01-25 at 14:02 By Richard Speed eVTOL to use existing aerodrome infrastructure The UK’s Civil Aviation Authority (CAA) is looking at design proposals for vertiports at existing aerodromes as the UK begins deliberation over the potential arrival of air taxis.… This article is an excerpt from

React to this headline:

Cyber Threat Landscape: 7 Key Findings and Upcoming Trends for 2024 2024-01-25 at 13:32 By The 2023/2024 Axur Threat Landscape Report provides a comprehensive analysis of the latest cyber threats. The information combines data from the platform’s surveillance of the Surface, Deep, and Dark Web with insights derived from the in-depth research and investigations conducted

React to this headline:

Psst … wanna jailbreak ChatGPT? Thousands of malicious prompts for sale 2024-01-25 at 13:16 By Jessica Lyons Hardcastle Turns out it’s pretty easy to make the model jump its own guardrails Criminals are getting increasingly adept at crafting malicious AI prompts to get data out of ChatGPT, according to Kaspersky, which spotted 249 of these

React to this headline:

Apple’s Vision Pro costs big bucks to buy and repair … just don’t mention the box design 2024-01-25 at 12:32 By Paul Kunert Still, up to 180,000 units sold under pre-order and China gray market prepping locals The old joke among less experienced tech product reviewers is that writing the review starts with opening the

React to this headline:

China-backed Hackers Hijack Software Updates to Implant “NSPX30” Spyware 2024-01-25 at 12:32 By A previously undocumented China-aligned threat actor has been linked to a set of adversary-in-the-middle (AitM) attacks that hijack update requests from legitimate software to deliver a sophisticated implant named NSPX30. Slovak cybersecurity firm ESET is tracking the advanced persistent threat (APT) group

React to this headline:

Firefox 122 gets even more competitive with Chrome on translation 2024-01-25 at 11:48 By Liam Proven Plus a big change for Linux folks – native .deb packages The latest Firefox has a raft of modest but desirable improvements for everyone, and a more significant change, external to the app itself, that will be helpful for

React to this headline:

Amazon Ring sounds death knell for surveillance as a service 2024-01-25 at 10:46 By Thomas Claburn Tough luck non-Americans, the cops can still see your footage Surveillance doorbell maker Amazon Ring on Wednesday announced it is discontinuing an option that allowed law enforcement agencies to request video footage without a warrant.… This article is an

React to this headline:

Wait, hold on, everyone – Mozilla thinks Apple, Google, Microsoft should play fair 2024-01-25 at 09:31 By Thomas Claburn Firefox maker about five years too late Mozilla has decided to be more vocal about the ways in which Apple, Google, and Microsoft set technical requirements that have hindered development of its Firefox web browser, and

React to this headline:

New CherryLoader Malware Mimics CherryTree to Deploy PrivEsc Exploits 2024-01-25 at 09:31 By A new Go-based malware loader called CherryLoader has been discovered by threat hunters in the wild to deliver additional payloads onto compromised hosts for follow-on exploitation. Arctic Wolf Labs, which discovered the new attack tool in two recent intrusions, said the loader’s icon and

React to this headline:

IBM Cloud is upgrading a datacenter and users will have to halt their Power VMs 2024-01-25 at 09:02 By Simon Sharwood Big Blue will move two VMs in each five-hour window offered to those willing to stay IBM Cloud has advised customers who run Power Systems Virtual Servers in its Toronto Canada (TOR01) datacenter of

React to this headline: