Uncategorized

Critical PostgreSQL bug tied to zero-day attack on US Treasury 2025-02-14 at 16:24 By Connor Jones High-complexity bug unearthed by infoseccers, as Rapid7 probes exploit further A high-severity SQL injection bug in the PostgreSQL interactive tool was exploited alongside the zero-day used to break into the US Treasury in December, researchers say.… This article is […]

International Space Station’s out-of-this-world selfie booth turns 15 2025-02-14 at 15:18 By Richard Speed The Cupola continues to offer the best views in the universe It has been 15 years since the ultimate selfie booth, the Cupola, was attached to the International Space Station (ISS).… This article is an excerpt from The Register View Original

Strategies for building an effective threat management team 2025-02-14 at 15:18 By The unfortunate reality is that tragic events, such as school shootings or violent incidents, have become a part of national discourse.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AWS vacates its board seat at European cloud crew CISPE 2025-02-14 at 14:50 By Paul Kunert … weeks after US titan was outvoted by other members to let Microsoft join the Euro cloud trade association Amazon’s Web Services wing has exited the board of CISPE (cloud infrastructure service providers in Europe), following a recent update

2 charged over alleged New IRA terrorism activity linked to cops’ spilled data 2025-02-14 at 14:18 By Connor Jones Officer says mistakenly published police details were shared ‘a considerable amount of times’ Two suspected New IRA members were arrested on Tuesday and charged under the Terrorism Act 2000 after they were found in possession of

Microsoft: Russian-Linked Hackers Using ‘Device Code Phishing’ to Hijack Accounts 2025-02-14 at 13:24 By Microsoft is calling attention to an emerging threat cluster it calls Storm-2372 that has been attributed to a new set of cyber attacks aimed at a variety of sectors since August 2024. The attacks have targeted government, non-governmental organizations (NGOs), information

AI-Powered Social Engineering: Ancillary Tools and Techniques 2025-02-14 at 13:24 By Social engineering is advancing fast, at the speed of generative AI. This is offering bad actors multiple new tools and techniques for researching, scoping, and exploiting organizations. In a recent communication, the FBI pointed out: ‘As technology continues to evolve, so do cybercriminals’ tactics.’

RansomHub Becomes 2024’s Top Ransomware Group, Hitting 600+ Organizations Globally 2025-02-14 at 13:24 By The threat actors behind the RansomHub ransomware-as-a-service (RaaS) scheme have been observed leveraging now-patched security flaws in Microsoft Active Directory and the Netlogon protocol to escalate privileges and gain unauthorized access to a victim network’s domain controller as part of their

Voda-Three name post-merger top team, keep schtum on layoffs 2025-02-14 at 12:51 By Dan Robinson Union estimates up to 1,600 job on the line Vodafone and Three have detailed the exec line-up taking the reins of post-merger UK biz, yet there is no word on when the deal will close, what name it will take,

Cyber Conspiracy Modernization Act proposed, cyber expert weighs in 2025-02-14 at 12:20 By A proposed bipartisan bill aims to increase punishment for cybercrimes.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Watchdog ponders why Apple doesn’t apply its strict app tracking rules to itself 2025-02-14 at 11:30 By Jude Karabus Germany’s Federal Cartel Office voices concerns iPhone maker may be breaking competition law Apple is feeling the heat over its acclaimed iPhone privacy policy after a German regulator’s review of iOS tracking consent alleged that the

HPE says blocking Juniper buy is a sure Huawei to ensure China and Cisco thrive 2025-02-14 at 09:02 By Simon Sharwood Analyst argues stopping the deal benefits Switchzilla by preventing rise of strong challenger for AI networks HPE has fired back at the US Department of Justice’s objection to its takeover of Juniper Networks, with

Chinese AI marches on as Baidu makes its chatbot free, Alibaba scores Apple deal 2025-02-14 at 07:30 By Simon Sharwood New ‘Deep Search’ thinking and planning bot to go up against peoples’ champion DeepSeek Chinese AI continued to march onto the world stage this week, with Alibaba and Baidu both taking major strides.… This article

PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks 2025-02-14 at 07:22 By Threat actors who were behind the exploitation of a zero-day vulnerability in BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products in December 2024 likely also exploited a previously unknown SQL injection flaw in PostgreSQL, according to findings from Rapid7. The

Shadow AI: The silent threat to enterprise data security 2025-02-14 at 07:03 By Just as IT departments have started to get a handle on shadow IT by setting policies for oversight and permissions on the use of applications, a new challenge has emerged — shadow AI. This article is an excerpt from Subscribe to Security

Lawyers face judge’s wrath after AI cites made-up cases in fiery hoverboard lawsuit 2025-02-14 at 06:16 By Thomas Claburn Talk about court red-handed Demonstrating yet again that uncritically trusting the output of generative AI is dangerous, attorneys involved in a product liability lawsuit have apologized to the presiding judge for submitting documents that cite non-existent

Chinese spies suspected of ‘moonlighting’ as tawdry ransomware crooks 2025-02-14 at 04:34 By Jessica Lyons Some employees steal sticky notes, others ‘borrow’ malicious code A crew identified as a Chinese government-backed espionage group appears to have started moonlighting as a ransomware player – further evidence that lines are blurring between nation-state cyberspies and financially motivated

TikTok returns on Apple, Google app stores as Trump delays ban 2025-02-14 at 04:16 By Reuters President Donald Trump delayed the TikTok ban until April 5 as the app is back on the U.S. app stores of Apple and Google. This article is an excerpt from Latest Technology News and Product Reviews | New York

After clash over Rust in the Linux kernel, Asahi lead quits, slams ‘failure of leadership’ 2025-02-14 at 00:20 By Thomas Claburn I fought the Torv and … the Torv won Hector Martin, project lead of Asahi Linux, resigned early Friday, Japan Standard Time, citing developer burnout, demanding users, and Linus Torvalds’s handling of the integration

Trump admin prepares to change conditions of CHIPS Act and its $39B subsidies: sources 2025-02-14 at 00:06 By Reuters One of the sources said the White House is also frustrated by companies that accepted CHIPS Act subsidies and then announced significant overseas expansion plans, including in China. The law allowed some investments in China. This