Uncategorized

Space rock 2024 YR4 still has 2.4% shot at smacking Earth 2025-02-18 at 18:19 By Richard Speed Scientists refine estimates, but can’t yet rule out an impact The latest figures from the European Space Agency (ESA) on the trajectory of asteroid 2024 YR4 show a reduction in uncertainty around the object’s orbit while the probability […]

FreSSH bugs undiscovered for years threaten OpenSSH security 2025-02-18 at 17:33 By Connor Jones Exploit code now available for MitM and DoS attacks Researchers can disclose two brand-new vulnerabilities in OpenSSH now that patches have been released.… This article is an excerpt from The Register View Original Source

Chinese Hackers Exploit MAVInject.exe to Evade Detection in Targeted Cyber Attacks 2025-02-18 at 17:17 By The Chinese state-sponsored threat actor known as Mustang Panda has been observed employing a novel technique to evade detection and maintain control over infected systems. This involves the use of a legitimate Microsoft Windows utility called Microsoft Application Virtualization Injector […]

Oracle extends 19c database support to 2032, making it ‘longest strategic release’ 2025-02-18 at 17:03 By Lindsay Clark Meanwhile, on-prem version of 23ai remains uncertain Oracle has postponed the end of support date for its popular 19c database as users await news of a mainstream on-prem version of its latest database, 23ai.… This article is […]

Ransomware attack hits 5 Michigan casinos, shuts them down 2025-02-18 at 17:03 By Casinos in Michigan were targeted by a ransomware attack.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Time to make C the COBOL of this century 2025-02-18 at 16:19 By Rupert Goodwins Lions juggling chainsaws are fun to watch, but you wouldn’t want them trimming your trees Opinion  Nobody likes The Man. When a traffic cop tells you to straighten up and slow down or else, profound thanks are rarely the first […]

New FrigidStealer Malware Targets macOS Users via Fake Browser Updates 2025-02-18 at 15:49 By Cybersecurity researchers are alerting to a new campaign that leverages web injects to deliver a new Apple macOS malware known as FrigidStealer. The activity has been attributed to a previously undocumented threat actor known as TA2727, with the information stealers for […]

Grok 3 wades into the AI wars with ‘beta’ rollout 2025-02-18 at 15:34 By Richard Speed Musk’s latest attempt at a ‘maximally truth-seeking’ bot arrives Grok 3 has begun rolling out. xAI founder Elon Musk describes the chatbot as “a maximally truth-seeking AI, even if that truth is sometimes at odds with what is politically […]

Huawei to bring massively expensive trifold smartphone to world market 2025-02-18 at 15:03 By Dan Robinson There’s everything to play for, but there ain’t no Play Store Huawei is bringing its triple-fold Mate XT smartphone to a global audience, but with an eye-watering reported price tag, the question is – who will want to buy […]

Super Bowl Sunday saw a 57% rise in malicious gambling content 2025-02-18 at 15:03 By A recent cybersecurity report by DNSFilter found that Super Bowl Sunday saw a 57% rise in malicious gambling and betting content.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Juniper Session Smart Routers Vulnerability Could Let Attackers Bypass Authentication 2025-02-18 at 14:33 By Juniper Networks has released security updates to address a critical security flaw impacting Session Smart Router, Session Smart Conductor, and WAN Assurance Router products that could be exploited to hijack control of susceptible devices. Tracked as CVE-2025-21589, the vulnerability carries a […]

Winnti APT41 Targets Japanese Firms in RevivalStone Cyber Espionage Campaign 2025-02-18 at 13:48 By The China-linked threat actor known as Winnti has been attributed to a new campaign dubbed RevivalStone that targeted Japanese companies in the manufacturing, materials, and energy sectors in March 2024. The activity, detailed by Japanese cybersecurity company LAC, overlaps with a […]

Debunking the AI Hype: Inside Real Hacker Tactics 2025-02-18 at 13:48 By Is AI really reshaping the cyber threat landscape, or is the constant drumbeat of hype drowning out actual, more tangible, real-world dangers? According to Picus Labs’ Red Report 2025 which analyzed over one million malware samples, there’s been no significant surge, so far, […]

Kelsey Hightower on dodging AI and the need for a glossary of IT terms 2025-02-18 at 13:33 By Richard Speed The science of the appliance and opening the lid of the black box to find… it’s just software Interview  The tech industry has a habit of reinventing itself every few years. Kelsey Hightower would like […]

UK electrical utility seeks partner for £81M SAP overhaul as support deadline closes in 2025-02-18 at 12:33 By Lindsay Clark Integrations with third-party software await chosen provider A UK electrical infrastructure biz is seeking a systems integrator to help it migrate from a 25-year-old SAP ERP system to the latest S/4HANA platform in a contract […]

The Change Healthcare breach: What changed, what didn’t, and what must 2025-02-18 at 12:16 By One year after the Change Healthcare breach, it’s time to look at what changed, what didn’t, and what must. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Lloyds Bank reviews tech and engineering personnel in reorg 2025-02-18 at 11:33 By Paul Kunert Admits it will be saying ‘goodbye to talented people’ in UK amid fears of jobs being offshored to India Lloyds Banking Group this month launched a review of the technology and engineering professionals working in the UK operation with headcount […]

New Xerox Printer Flaws Could Let Attackers Capture Windows Active Directory Credentials 2025-02-18 at 10:05 By Security vulnerabilities have been disclosed in Xerox VersaLink C7025 Multifunction printers (MFPs) that could allow attackers to capture authentication credentials via pass-back attacks via Lightweight Directory Access Protocol (LDAP) and SMB/FTP services. “This pass-back style attack leverages a vulnerability […]

Avaya hangs up on users with fewer than 200 SaaSy contact center seats 2025-02-18 at 09:31 By Simon Sharwood Customers told to pay up, quit, or wait for promised alternative ‘innovation’ coming real soon now Avaya has advised customers and resellers of a planned “evolution” of its products that starts with a requirement to license […]

Cyber incident response in 2025: Rising risks and dynamic challenges 2025-02-18 at 08:18 By In 2025, business security professionals will likely face three significant trends shaping the way cyber incidents are managed. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source