Uncategorized

Poisoned Go programming language package lay undetected for 3 years 2025-02-04 at 19:34 By Connor Jones Researcher says ecosystem’s auto-caching is a net positive but presents exploitable quirks A security researcher says a backdoor masquerading as a legitimate Go programming language package used by thousands of organizations was left undetected for years.… This article is […]

39 cybercrime domains seized, linked to HeartSender cybercrime group 2025-02-04 at 19:18 By Law enforcement agencies have dismantled 39 cybercrime domains and associated servers. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Scale AI CEO to meet with White House, Congress over China AI threat: report 2025-02-04 at 18:33 By Thomas Barrabi Scale AI CEO Alexandr Wang is heading to Washington DC this week to discuss the threat posed by China’s rapid advancements in artificial intelligence – days after Chinese AI startup DeepSeek sparked a $1 trillion

Palantir designed to ‘power the West to its obvious innate superiority,’ says CEO 2025-02-04 at 18:19 By Lindsay Clark Um, does anyone wanna switch seats? Palantir CEO Alex Karp says one of his aims when building the controversial spy‑tech company was to “power the West to its obvious innate superiority.”… This article is an excerpt

54% of cyber leaders say budget constraints are a top challenge 2025-02-04 at 18:03 By A new survey reveals insights into the biggest threats on cyber experts’ radars.   This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Malicious Go Package Exploits Module Mirror Caching for Persistent Remote Access 2025-02-04 at 18:03 By Cybersecurity researchers have called attention to a software supply chain attack targeting the Go ecosystem that involves a malicious package capable of granting the adversary remote access to infected systems. The package, named github.com/boltdb-go/bolt, is a typosquat of the legitimate

Grubhub serves up security incident with a side of needing to change your password 2025-02-04 at 17:33 By Connor Jones Contact info and partial payment details may be compromised US food and grocery delivery platform Grubhub says a security incident at a third-party service provider is to blame after user data was compromised.… This article

90% of security professionals report conformance with DORA 2025-02-04 at 17:33 By Ninety percent of professionals report conformance with Digital Operational Resilience Act and the Network and Information Security Directive 2. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

US accuses Canadian math prodigy of $65M crypto scheme 2025-02-04 at 16:48 By Jude Karabus Suspect, still at large, said to back concept that ‘code is law’ New York feds today unsealed a five-count criminal indictment charging a 22-year-old Canadian math prodigy with exploiting vulnerabilities in two decentralized finance protocols, allegedly using them to fraudulently

Intel knocked off global chip revenue top spot after rotten 2024 2025-02-04 at 16:03 By Dan Robinson Missed the AI processor boat, split with CEO savior, lost #1 seat to Samsung Eight out of the top ten semiconductor vendors recorded healthy revenue growth last year, fueled by burgeoning GPU and AI processor sales to datacenter

Russian Cybercrime Groups Exploiting 7-Zip Flaw to Bypass Windows MotW Protections 2025-02-04 at 15:33 By A recently patched security vulnerability in the 7-Zip archiver tool was exploited in the wild to deliver the SmokeLoader malware. The flaw, CVE-2025-0411 (CVSS score: 7.0), allows remote attackers to circumvent mark-of-the-web (MotW) protections and execute arbitrary code in the

North Korean Hackers Deploy FERRET Malware via Fake Job Interviews on macOS 2025-02-04 at 15:33 By The North Korean threat actors behind the Contagious Interview campaign have been observed delivering a collection of Apple macOS malware strains dubbed FERRET as part of a supposed job interview process. “Targets are typically asked to communicate with an

Ireland’s AI minister has never used ChatGPT but swears she’ll learn fast 2025-02-04 at 15:21 By Richard Currie Hey, it’s not like any governments know what they are doing The Republic of Ireland’s new AI minister should probably consult ChatGPT immediately to ask for pointers on how to do her job.… This article is an

Why users still couldn’t care less about Windows 11 2025-02-04 at 14:38 By Richard Speed No reason to upgrade other than the looming end of Windows 10 Comment  Users are still steering clear of Windows 11, with some customers describing the sales pitch as “like trying to sell sand at a beach.”… This article is

Cyberattack on NHS causes hospitals to miss cancer care targets 2025-02-04 at 13:48 By Connor Jones Healthcare chiefs say impact will persist for months NHS execs admit that last year’s cyberattack on hospitals in Wirral, northwest England, continues to “significantly” impact waiting times for cancer treatments, and suspect this will last for “months.”… This article

Watch Out For These 8 Cloud Security Shifts in 2025 2025-02-04 at 13:48 By As cloud security evolves in 2025 and beyond, organizations must adapt to both new and evolving realities, including the increasing reliance on cloud infrastructure for AI-driven workflows and the vast quantities of data being migrated to the cloud. But there are

Abandoned AWS S3 buckets can be reused in supply-chain attacks that would make SolarWinds look ‘insignificant’ 2025-02-04 at 13:06 By Jessica Lyons When cloud customers don’t clean up after themselves, part 97 Abandoned AWS S3 buckets could be reused to hijack the global software supply chain in an attack that would make Russia’s “SolarWinds adventures

Amazon’s Kuiper secures license to take on Starlink in the UK 2025-02-04 at 12:35 By Richard Speed Everybody is going to play nice, OK? Telecom watchdog Ofcom has granted a license application from Amazon Kuiper Services Europe for satellite connectivity in the UK.… This article is an excerpt from The Register View Original Source

Ransomware attack targets the New York Blood Center 2025-02-04 at 12:16 By The New York Blood Center experienced a ransomware attack.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

UK govt must learn fast and let failing projects die young 2025-02-04 at 11:48 By Lindsay Clark Tackle longstanding issues around productivity, cyber resilience and public sector culture, advises spending watchdog The UK’s government spending watchdog has called on the current administration to make better use of technology to kickstart the misfiring economy and ensure