Uncategorized

Bing Wallpaper app, now in Windows Store, accused of cookie shenanigans 2024-11-26 at 16:33 By Brandon Vigliarolo Microsoft free tool snooping on users? Surely not! If you’ve been tempted to download the Bing Wallpaper app to spice up your Windows 11 desktop backgrounds, you may want to think twice.… This article is an excerpt from […]

Critical WordPress Anti-Spam Plugin Flaws Expose 200,000+ Sites to Remote Attacks 2024-11-26 at 15:50 By Two critical security flaws impacting the Spam protection, Anti-Spam, and FireWall plugin WordPress could allow an unauthenticated attacker to install and enable malicious plugins on susceptible sites and potentially achieve remote code execution. The vulnerabilities, tracked as CVE-2024-10542 and CVE-2024-10781,

Google must face £7B UK class action over search engine dominance 2024-11-26 at 15:03 By Richard Speed Ad slinger alleged to have abused position, resulting in higher prices for consumers Google must face a £7 billion ($8.8 billion) claim in the UK over allegations it abused its search engine dominance, a tribunal has ruled.… This

Intruder Launches Intel: A Free Vulnerability Intelligence Platform For Staying Ahead of the Latest Threats 2024-11-26 at 14:18 By When CVEs go viral, separating critical vulnerabilities from the noise is essential to protecting your organization. That’s why Intruder, a leader in attack surface management, built Intel – a free vulnerability intelligence platform designed to help

Another ‘major cyber incident’ at a UK hospital, outpatients asked to stay away 2024-11-26 at 13:49 By Connor Jones Third time this year an NHS unit’s IT systems have come under attack A UK hospital is declaring a “major incident,” cancelling all outpatient appointments due to “cybersecurity reasons.”… This article is an excerpt from The

Chinese Hackers Use GHOSTSPIDER Malware to Hack Telecoms Across 12+ Countries 2024-11-26 at 13:21 By The China-linked threat actor known as Earth Estries has been observed using a previously undocumented backdoor called GHOSTSPIDER as part of its attacks targeting Southeast Asian telecommunications companies.  Trend Micro, which described the hacking group as an aggressive advanced persistent

RomCom Exploits Zero-Day Firefox and Windows Flaws in Sophisticated Cyberattacks 2024-11-26 at 13:21 By The Russia-aligned threat actor known as RomCom has been linked to the zero-day exploitation of two security flaws, one in Mozilla Firefox and the other in Microsoft Windows, as part of attacks designed to deliver the eponymous backdoor on victim systems.

QNAP and Veritas dump 30-plus vulns over the weekend 2024-11-26 at 12:33 By Connor Jones Just what you want to find when you start a new week Taiwanese NAS maker QNAP addressed 24 vulnerabilities across various products over the weekend.… This article is an excerpt from The Register View Original Source

UK council still hadn’t fully costed troubled Oracle project 2 years in 2024-11-26 at 11:48 By Lindsay Clark Meanwhile, budget clambered from £2.6M to nearly £40M, says report A UK council had no fully costed and resourced plan in place to deliver a critical Oracle ERP project two years after beginning an SAP-replacement program, one

More than 2,000 Palo Alto Networks firewalls compromised 2024-11-26 at 11:19 By Malicious actors were able to compromise more than 2,000 Palo Alto Networks firewalls. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AWS bends to Broadcom’s will with VMware Cloud Foundation as-a-service 2024-11-26 at 10:33 By Simon Sharwood Microsoft, Oracle, and IBM are all doing it. Andy Jassy’s rent-a-server shop may have felt it was leaving money on the table Amazon Web Services has introduced a VMware-as-a-service offering that conforms to Broadcom’s licensing schemes.… This article is

Bluesky too opaque about user figures for Euro watchdogs 2024-11-26 at 09:33 By Thomas Claburn X rival also under fire for failing to designate legal representative The Bluesky social network is not yet big enough to be considered “Very Large Online Platform” subject to special obligations under Europe’s Digital Services Act (DSA) – but it’s

Britain Putin up stronger AI defences to counter growing cyber threats 2024-11-26 at 08:49 By Iain Thomson ‘Be in no doubt: the UK and others in this room are watching Russia’ The government of the United Kingdom on Monday announced the formation of a Laboratory for AI Security Research (LASR) to make the nation more

CISA Urges Agencies to Patch Critical “Array Networks” Flaw Amid Active Attacks 2024-11-26 at 07:49 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched critical security flaw impacting Array Networks AG and vxAG secure access gateways to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the

Indonesia tells Apple $100 million investment isn’t enough to lift iPhone 16 sale ban 2024-11-26 at 07:39 By Laura Dobberstein Wants Cook to look under the couch again and find at least another $15 million Indonesia’s Ministry of Industry has snubbed Apple’s proposal to invest 1.6 trillion Rupiah ($100 million) in an iPhone accessory and

CISA Director Jen Easterly to resign, cybersecurity experts weigh in 2024-11-26 at 07:19 By Cybersecurity experts are discussing the resignation of Jen Easterly, Director of the Cybersecurity and Infrastructure Security Agency. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

China’s tech giants deliver chips for Ethernet variant tuned to HPC and AI workloads 2024-11-26 at 06:19 By Simon Sharwood ‘Global Scheduling Ethernet’ looks a lot like tech the Ultra Ethernet Consortium is also working on Chinese tech giants last week announced the debut of chips to power a technology called “Global Scheduling Ethernet” that

Kill Oracle’s ‘JavaScript’ trademark, Deno asks USPTO 2024-11-26 at 05:03 By Thomas Claburn Petition claims database titan maintained its mark by making a fraudulent claim Deno Land, maker of the Deno runtime for JavaScript, TypeScript, and WebAssembly, has filed a petition with the US Patent and Trademark Office (USPTO) to cancel Oracle’s JavaScript trademark.… This

Supply chain management vendor Blue Yonder succumbs to ransomware 2024-11-26 at 03:33 By Simon Sharwood And it looks like major UK retailers that rely on it are feeling the pinch US-based supply chain SaaS vendor Blue Yonder has revealed a service disruption caused by ransomware, and its customers are reportedly struggling to get goods onto