SecurityTicks

Let’s play… Turn off the power to datacenter boxen 13/08/2023 at 00:02 By Jessica Lyons Hardcastle Trellix bods say it’s not that hard to do, thanks to these vulnerabilities DEF CON  It would be relatively easy for miscreants to break into critical datacenter power management gear, shut off electricity supplies to multiple connected devices, and […]

React to this headline:

Inside the Black Hat network operations center, volunteers work in geek heaven 12/08/2023 at 16:31 By Iain Thomson NOC, NOC … Who’s there? Black Hat  Every summer, pandemics permitting, a group of volunteers gather in a Las Vegas hotel to run one of the more unusual examples of IT infrastructure on the planet: the Black

React to this headline:

Zoom ZTP & AudioCodes Phones Flaws Uncovered, Exposing Users to Eavesdropping 12/08/2023 at 15:01 By Multiple security vulnerabilities have been disclosed in AudioCodes desk phones and Zoom’s Zero Touch Provisioning (ZTP) that could be potentially exploited by a malicious attacker to conduct remote attacks. “An external attacker who leverages the vulnerabilities discovered in AudioCodes Ltd.’s

React to this headline:

Google Chrome to shield encryption keys from promised quantum computers 12/08/2023 at 13:36 By Thomas Claburn QC crypto-cracking coming in 5, 10, maybe 50 years, so act … now? Google has started deploying a hybrid key encapsulation mechanism (KEM) to protect the sharing of symmetric encryption secrets during the establishment of secure TLS network connections.…

React to this headline:

Curiosity finds evidence of wet and dry seasons on ancient Mars 12/08/2023 at 11:16 By Brandon Vigliarolo Scientists: Martian mud cracked in a manner that only happens after repeated cycles of drying The Mars Curiosity rover continues to make discoveries that shed light on the early days of the Red Planet, this time having found

React to this headline:

Lolek Bulletproof Hosting Servers Seized, 5 Key Operators Arrested 12/08/2023 at 10:31 By European and U.S. law enforcement agencies have announced the dismantling of a bulletproof hosting service provider called Lolek Hosted, which cybercriminals have used to launch cyber-attacks across the globe. “Five of its administrators were arrested, and all of its servers seized, rendering LolekHosted.net

React to this headline:

New Python URL Parsing Flaw Enables Command Injection Attacks 12/08/2023 at 09:45 By A high-severity security flaw has been disclosed in the Python URL parsing function that could be exploited to bypass domain or protocol filtering methods implemented with a blocklist, ultimately resulting in arbitrary file reads and command execution. “urlparse has a parsing problem

React to this headline:

Veilid: A secure peer-to-peer network for apps that flips off the surveillance economy 12/08/2023 at 03:18 By Iain Thomson ‘It’s like Tor and IPFS had sex and produced this thing’ DEF CON  Infosec super-band the Cult of the Dead Cow has released Veilid (pronounced vay-lid), an open source project applications can use to connect up

React to this headline:

Judge denies HP’s request to dismiss all-in-one printer lockdown lawsuit 12/08/2023 at 02:32 By Brandon Vigliarolo HP AiO devices won’t scan or fax without ink, and plaintiffs say HP illegally withheld that info from buyers HP all-in-one printer owners, upset that their devices wouldn’t scan or fax when low on ink, were handed a partial

React to this headline:

FTX crypto-clown Sam Bankman-Fried couldn’t even do house arrest. Now he’s in jail 12/08/2023 at 01:18 By Thomas Claburn Feds argue leaks to press amount to witness tampering Sam Bankman-Fried (SBF), former chief executive of crypto-disaster FTX, who has been awaiting trial for his firm’s failure while in home detention with his family, has been

React to this headline:

Amazon’s latest directive: Report to the office ‘cos we’re watching you 12/08/2023 at 01:04 By Jude Karabus Worker bees protest that they were read the riot act even when they did come in Amazon has contacted staff it says are not clocking into the office three days a week “even though your assigned building is

React to this headline:

Virgin Galactic sends oldest-ever Brit and first mother-daughter duo into space-ish 12/08/2023 at 00:17 By Katyanna Quach Depending on where you draw the line Virgin Galactic successfully launched its first-ever private commercial spaceflight on Thursday, flying three space tourists to altitudes high enough to experience zero-gravity conditions for a few minutes.… This article is an

React to this headline:

Tinker Tailor Soldier Pi? Asus’s ‘NUC-sized’ SBC aims to out-Pi the Raspberry 11/08/2023 at 23:49 By Dan Robinson Bigger, bolder, and brimming with ports for hobbyists and devs alike Asus has released a new addition to its Tinker Board line of Arm-based single-board computer (SBC) systems, giving hobbyists and embedded developers another design option with

React to this headline:

Microsoft warns Codesys PLC bugs could ‘shut down power plants’ 11/08/2023 at 22:47 By Jessica Lyons Hardcastle What are they running, Windows? Ka-boom-tsch Fifteen bugs in Codesys’ industrial control systems software could be exploited to shut down power plants or steal information from critical infrastructure environments, experts have claimed.… This article is an excerpt from

React to this headline:

Amazon’s rumored investment in Arm’s IPO might be good insurance 11/08/2023 at 22:17 By Tobias Mann What benefits the chip designer will trickle down to AWS’s Graviton team Analysis  One of Amazon Web Services’ key differentiators is its use of custom silicon, including Arm CPUs throughout its cloud infrastructure.… This article is an excerpt from

React to this headline:

Maker of Chrome extension with 300,000+ users tells of constant pressure to sell out 11/08/2023 at 20:33 By Thomas Claburn Anyone with sizable audience in this surveillance economy is invited to stuff their apps with tracking and ads Interview  In the past nine years, Oleg Anashkin, a software developer based in San Jose, California, has

React to this headline:

HashiCorp’s new license is still open source-ish, just with less free lunch 11/08/2023 at 19:02 By Liam Proven Company transitions to BSL, and fundies are furious HashiCorp, the vendor of Vagrant, Terraform, and a number of other deployment-automation tools, is changing its software license to the Business Source License. You can still get the source

React to this headline:

Linux project’s first full version has all the subtlety of a Rhino in a China shop 11/08/2023 at 17:49 By Liam Proven An option if Ubuntu interim releases are too slow, easy and stable for your liking The first release of Rhino Linux brings the rolling release model of Arch Linux to an Ubuntu base,

React to this headline:

Researchers Uncover Decade-Long Cyber Espionage on Foreign Embassies in Belarus 11/08/2023 at 17:32 By A hitherto undocumented threat actor operating for nearly a decade and codenamed MoustachedBouncer has been attributed to cyber espionage attacks aimed at foreign embassies in Belarus. “Since 2020, MoustachedBouncer has most likely been able to perform adversary-in-the-middle (AitM) attacks at the ISP

React to this headline: