Uncategorized

Mega council officers had know idea what they were buying ahead of Oracle fiasco 2025-02-25 at 16:15 By Lindsay Clark Lack of skills left Birmingham officials unable to challenge suppliers and with a system incapable of managing finances Council officers heading up a disastrous Oracle implementation that left Europe’s largest local authority unable to manage […]

China’s Silver Fox spoofs medical imaging apps to hijack patients’ computers 2025-02-25 at 15:18 By Jessica Lyons Sly like a PRC cyberattack A Chinese government-backed group is spoofing legitimate medical software to hijack hospital patients’ computers, infecting them with backdoors, credential-swiping keyloggers, and cryptominers.… This article is an excerpt from The Register View Original Source

John Carse hired as Field CISO at Squarex 2025-02-25 at 15:17 By John Carse has been hired as Field Chief Information Security Officer (CISO) at SquareX. Carse has over two decades of cybersecurity experience. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Tesla owners may be swapping out vehicle logos due to vandalism fears linked to Elon Musk 2025-02-25 at 15:00 By News.com.au It’s possible that owners could be distancing themselves from Musk following his ties to far-right wing groups and role in the Trump Administration’s DOGE. This article is an excerpt from Latest Technology News and

London is bottom in Europe for 5G, while Europe lags the rest of the world 2025-02-25 at 14:48 By Dan Robinson Plus: Fandroid alert – Android devices sometimes say ‘5G’ when connecting to 4G London is bottom of the table when it comes to 5G mobile service, according to a report gauging major European cities

Are you cooler than ex-Apple design guru Sir Jony Ive? 2025-02-25 at 13:55 By Richard Currie What is it with high-powered execs and their love for U2? Ex-Apple design whiz Sir Jony Ive appeared on the BBC’s long-running Radio 4 show Desert Island Discs over the weekend. Despite his storied career and close friendship with

Malware variants that target operational tech systems are very rare – but 2 were found last year 2025-02-25 at 13:18 By Jessica Lyons Fuxnet and FrostyGoop were both used in the Russia-Ukraine war Two new malware variants specifically designed to disrupt critical industrial processes were set loose on operational technology networks last year, shutting off

GitVenom Malware Steals $456K in Bitcoin Using Fake GitHub Projects to Hijack Wallets 2025-02-25 at 13:18 By Cybersecurity researchers are calling attention to an ongoing campaign that’s targeting gamers and cryptocurrency investors under the guise of open-source projects hosted on GitHub. The campaign, which spans hundreds of repositories, has been dubbed GitVenom by Kaspersky. “The

2,500+ Truesight.sys Driver Variants Exploited to Bypass EDR and Deploy HiddenGh0st RAT 2025-02-25 at 13:18 By A large-scale malware campaign has been found leveraging a vulnerable Windows driver associated with Adlice’s product suite to sidestep detection efforts and deliver the Gh0st RAT malware. “To further evade detection, the attackers deliberately generated multiple variants (with different

5 Active Malware Campaigns in Q1 2025 2025-02-25 at 13:18 By The first quarter of 2025 has been a battlefield in the world of cybersecurity. Cybercriminals continued launching aggressive new campaigns and refining their attack methods. Below is an overview of five notable malware families, accompanied by analyses conducted in controlled environments. NetSupport RAT Exploiting

OBS-tacle course: Fedora and Flathub’s Flatpak fiasco sparks repo rumble 2025-02-25 at 12:29 By Liam Proven Dispute settled, but not the causes A clash over different Flatpak-packaged versions of OBS Studio highlights problems with distro-maintained software repositories versus external ones.… This article is an excerpt from The Register View Original Source

7-year-old vulnerability exploited in Salt Typhoon attack 2025-02-25 at 12:03 By Security leaders discuss the 7-year-old vulnerability that was exploited in the Salt Typhoon attack.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Southern Water takes the fifth over alleged $750K Black Basta ransom offer 2025-02-25 at 11:33 By Connor Jones Leaked chats and spilled secrets as AI helps decode circa 200K private talks Southern Water neither confirms nor denies offering Black Basta a $750,000 ransom payment following its ransomware attack in 2024.… This article is an excerpt

Hurrah! AI won’t destroy developer or DBA jobs 2025-02-25 at 10:33 By Dan Robinson Bureau of Labor Statics warns lawyers and customer service reps to brace for change, says techies will be fine Developers worried about their careers in the age of AI might be able to relax a little after the US Bureau of

How nice that state-of-the-art LLMs reveal their reasoning … for miscreants to exploit 2025-02-25 at 09:49 By Thomas Claburn and Jessica Lyons Blueprints shared for jail-breaking models that expose their chain-of-thought process Analysis  AI models like OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking can mimic human reasoning through a process called chain of thought.…

FatalRAT Phishing Attacks Target APAC Industries Using Chinese Cloud Services 2025-02-25 at 08:58 By Various industrial organizations in the Asia-Pacific (APAC) region have been targeted as part of phishing attacks designed to deliver a known malware called FatalRAT. “The threat was orchestrated by attackers using legitimate Chinese cloud content delivery network (CDN) myqcloud and the

If you dip your toes into immersion cooling, watch out for dielectric liquid sharks 2025-02-25 at 08:38 By Simon Sharwood The small pool of suppliers understand their market power APRICOT 2025  The market for dielectric liquid required for immersion cooling is dominated by a small number of players that are aware of their market power.…

Automation gains traction as CISOs grapple with compliance challenges 2025-02-25 at 08:04 By As security leaders navigate increasingly complex technology environments, compliance with new and existing regulations remains a challenge. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Two Actively Exploited Security Flaws in Adobe and Oracle Products Flagged by CISA 2025-02-25 at 06:48 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws impacting Adobe ColdFusion and Oracle Agile Product Lifecycle Management (PLM) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities