Uncategorized

Microsoft cutting more jobs as new year begins 2025-01-09 at 17:49 By Brandon Vigliarolo Redmond claims cuts are performance based Microsoft kicks off the new year with more job cuts, as fewer than 1 percent of employees reportedly face the axe.… This article is an excerpt from The Register View Original Source

Zero-day exploits plague Ivanti Connect Secure appliances for second year running 2025-01-09 at 16:46 By Connor Jones Factory resets and apply patches is the advice amid fortnight delay for other appliances The cybersecurity industry is urging those in charge of defending their orgs to take mitigation efforts “seriously” as Ivanti battles two dangerous new vulnerabilities,

Trump China tariffs to ‘overshadow’ the ‘progress’ of AI PCs 2025-01-09 at 16:19 By Paul Kunert Already inflated costs of NPU-based boxes set to jump on import tax The “progress” of AI PCs is being “overshadowed” by enterprises concerned about the state of the economy and US President-elect Trump’s tariff threats for kit made in

New Banshee Stealer Variant Bypasses Antivirus with Apple’s XProtect-Inspired Encryption 2025-01-09 at 16:19 By Cybersecurity researchers have uncovered a new, stealthier version of a macOS-focused information-stealing malware called Banshee Stealer. “Once thought dormant after its source code leak in late 2024, this new iteration introduces advanced string encryption inspired by Apple’s XProtect,” Check Point Research

Security pros baited with fake Windows LDAP exploit traps 2025-01-09 at 15:19 By Connor Jones Tricky attackers trying yet again to deceive the good guys on home territory Security researchers are once again being lured into traps by attackers, this time with fake exploits of serious Microsoft security flaws.… This article is an excerpt from

Product Review: How Reco Discovers Shadow AI in SaaS 2025-01-09 at 15:18 By As SaaS providers race to integrate AI into their product offerings to stay competitive and relevant, a new challenge has emerged in the world of AI: shadow AI.  Shadow AI refers to the unauthorized use of AI tools and copilots at organizations.

“U.S. Cyber Trust Mark” launched by the White House 2025-01-09 at 15:05 By The White House announced a “U.S. Cyber Trust Mark,” establishing a label for American consumers to verify if their connected devices are cybersecure. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

NASA’s lunar Roomba set to suck up Moon dirt for study 2025-01-09 at 14:23 By Richard Speed Collecting regolith samples with a blast of gas NASA is sending a “vacuum cleaner” to the Moon as a payload on next week’s Blue Ghost 1 mission to land on the lunar surface.… This article is an excerpt

Webinar: Learn How to Stop Encrypted Attacks Before They Cost You Millions 2025-01-09 at 13:50 By Ransomware isn’t slowing down—it’s getting smarter. Encryption, designed to keep our online lives secure, is now being weaponized by cybercriminals to hide malware, steal data, and avoid detection.The result? A 10.3% surge in encrypted attacks over the past year

MirrorFace Leverages ANEL and NOOPDOOR in Multi-Year Cyberattacks on Japan 2025-01-09 at 13:50 By Japan’s National Police Agency (NPA) and National Center of Incident Readiness and Strategy for Cybersecurity (NCSC) accused a China-linked threat actor named MirrorFace of orchestrating a persistent attack campaign targeting organizations, businesses, and individuals in the country since 2019. The primary

What happens when someone subpoenas Cloudflare to unmask a blogger? This… 2025-01-09 at 13:18 By Thomas Claburn Ex-politician in UK claims he’s been defamed – and goes to court in US for answers A former deputy mayor in the UK has subpoenaed Cloudflare in the US to discover the identity of an anonymous British political

£3.8B later, old tech supplier flames still burning for HMRC 2025-01-09 at 12:43 By Lindsay Clark Deal supposed to end in 2017 continues to haunt HMRC procurement In the last five years, the UK’s tax collector has spent £3.8 billion with tech suppliers – including £591 million without any outside competition – on top of

Critical RCE Flaw in GFI KerioControl Allows Remote Code Execution via CRLF Injection 2025-01-09 at 12:43 By Threat actors are attempting to take advantage of a recently disclosed security flaw impacting GFI KerioControl firewalls that, if successfully exploited, could allow malicious actors to achieve remote code execution (RCE). The vulnerability in question, CVE-2024-52875, refers to

Recent research reveals “phish-free PayPal phishing” scam 2025-01-09 at 12:03 By Research reveals the emergence of a “phish-free PayPal phishing” scam. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

UK government pledges law against sexually explicit deepfakes 2025-01-09 at 11:37 By Lindsay Clark Not just making them, but sharing them too The UK government has promised to make the creation and sharing of sexually explicit deepfake images a criminal offence.… This article is an excerpt from The Register View Original Source

The ultimate Pi 5 arrives carrying 16GB … and a price to match 2025-01-09 at 10:07 By Richard Speed How much RAM does an enthusiast really need? The Raspberry Pi has come a long way from its early days, as demonstrated by the single-board computer maker’s latest iteration of the Pi 5 in 16GB guise.…

To save the energy grid from AI, use open source AI, says open source body 2025-01-09 at 09:01 By Thomas Claburn Linux Foundation Energy argues rapidly decentralizing electricity sector can’t succeed with silos The energy industry needs to adopt open source AI software, and the collaborative processes used to create it, to satisfy demand for

Microsoft invites Chinese software vendors to sell on its marketplace and through its partners 2025-01-09 at 07:49 By Simon Sharwood Good luck getting buyers and resellers excited about that Would you adopt software from a Chinese vendor? We ask because Microsoft has started helping Middle Kingdom developers to sell through its online marketplaces and channel.…

Ivanti Flaw CVE-2025-0282 Actively Exploited, Impacts Connect Secure and Policy Secure 2025-01-09 at 07:31 By Ivanti is warning that a critical security flaw impacting Ivanti Connect Secure, Policy Secure, and ZTA Gateways has come under active exploitation in the wild beginning mid-December 2024. The security vulnerability in question is CVE-2025-0282 (CVSS score: 9.0), a stack-based