Uncategorized

Chinese APT Exploits BeyondTrust API Key to Access U.S. Treasury Systems and Documents 2024-12-31 at 08:48 By The United States Treasury Department said it suffered a “major cybersecurity incident” that allowed suspected Chinese threat actors to remotely access some computers and unclassified documents.  “On December 8, 2024, Treasury was notified by a third-party software service […]

Misconfigured Kubernetes RBAC in Azure Airflow Could Expose Entire Cluster to Exploitation 2024-12-31 at 07:33 By Cybersecurity researchers have uncovered three security weaknesses in Microsoft’s Azure Data Factory Apache Airflow integration that, if successfully exploited, could have allowed an attacker to gain the ability to conduct various covert actions, including data exfiltration and malware deployment. […]

More telcos confirm Salt Typhoon breaches as White House weighs in 2024-12-31 at 01:34 By Jessica Lyons The intrusions allowed Beijing to ‘geolocate millions of individuals’ AT&T, Verizon, and Lumen Technologies confirmed that Chinese government-backed snoops accessed portions of their systems earlier this year, while the White House added another, yet-unnamed telecommunications company to the […]

Jimmy Carter set the solar, space, and environmental pace 2024-12-30 at 23:34 By Brandon Vigliarolo The former president, passed at 100 this week, was also an early email adopter obituary  American flags throughout the United States are flying at half-mast to honor the life of Jimmy Carter, the 39th and longest-lived US president, who died […]

Blue Origin inches closer to the first New Glenn flight 2024-12-30 at 18:49 By Richard Speed Final big tests done and engines fired up for a few seconds. Next stop … space? Blue Origin has successfully performed a hotfire of its New Glenn rocket, paving the way for the vehicle’s first launch in the coming […]

⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips 2024-12-30 at 15:03 By Every week, the digital world faces new challenges and changes. Hackers are always finding new ways to breach systems, while defenders work hard to keep our data safe. Whether it’s a hidden flaw in popular software or a clever new attack […]

New HIPAA Rules Mandate 72-Hour Data Restoration and Annual Compliance Audits 2024-12-30 at 15:03 By The United States Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) has proposed new cybersecurity requirements for healthcare organizations with an aim to safeguard patients’ data against potential cyber attacks. The proposal, which seeks to modify […]

When Good Extensions Go Bad: Takeaways from the Campaign Targeting Browser Extensions 2024-12-30 at 13:51 By News has been making headlines over the weekend of the extensive attack campaign targeting browser extensions and injecting them with malicious code to steal user credentials. Currently, over 25 extensions, with an install base of over two million users, […]

Minimizing CISO personal liability through end of year budgeting 2024-12-30 at 07:20 By To minimize the potential risks to their organizations and their own personal well-being, there are a number of steps CISOs should consider taking as they work to prepare for fiscal year 2025. This article is an excerpt from Subscribe to Security Magazine’s […]

It’s only a matter of time before LLMs jump start supply-chain attacks 2024-12-29 at 20:36 By Jessica Lyons ‘The greatest concern is with spear phishing and social engineering’ Interview  Now that criminals have realized there’s no need to train their own LLMs for any nefarious purposes – it’s much cheaper and easier to steal credentials […]

16 Chrome Extensions Hacked, Exposing Over 600,000 Users to Data Theft 2024-12-29 at 20:16 By A new attack campaign has targeted known Chrome browser extensions, leading to at least 16 extensions being compromised and exposing over 600,000 users to data exposure and credential theft. The attack targeted publishers of browser extensions on the Chrome Web […]

How cops taking down LockBit, ALPHV led to RansomHub’s meteoric rise 2024-12-28 at 14:51 By Jessica Lyons Cut off one head, two more grow back in its place RansomHub, the ransomware collective that emerged earlier this year, quickly gained momentum, outpacing its criminal colleagues and hitting its victims especially hard. The group named and shamed […]

Christmas 1984: The last hurrah for 8-bit home computers 2024-12-28 at 11:48 By Richard Speed Saturation point, and Nintendo and Sega, were just around the corner Feature  Remember the excitement of leafing through a catalog for home computer bargains? Or perhaps gazing longingly at festive tech displays in Britain’s WH Smith (or ComputerLand if you […]

15,000+ Four-Faith Routers Exposed to New Exploit Due to Default Credentials 2024-12-28 at 08:45 By A high-severity flaw impacting select Four-Faith routers has come under active exploitation in the wild, according to new findings from VulnCheck. The vulnerability, tracked as CVE-2024-12856 (CVSS score: 7.2), has been described as an operating system (OS) command injection bug […]

OpenAI plans to ring in the New Year with a for-profit push 2024-12-27 at 22:33 By Tobias Mann We have altered the deal, pray we don’t alter it any further Amid growing competition and skyrocketing compute requirements necessary to support the next generation of AI models, OpenAI is shaking up its corporate structure – again.… […]

North Korean Hackers Deploy OtterCookie Malware in Contagious Interview Campaign 2024-12-27 at 20:48 By North Korean threat actors behind the ongoing Contagious Interview campaign have been observed dropping a new JavaScript malware called OtterCookie. Contagious Interview (aka DeceptiveDevelopment) refers to a persistent attack campaign that employs social engineering lures, with the hacking crew often posing […]

Microsoft adds another problem to the Windows 11 24H2 naughty list 2024-12-27 at 19:33 By Richard Speed Santa Satya pops one more issue into his sack just in time for Christmas The trickle of known issues with Windows 11 24H2 has continued with a new one just in time for festive season: installed the operating […]

Disgraced crypto tycoon Do Kwon will finally be extradited to US from Montenegro 2024-12-27 at 19:18 By Reuters A South Korean national, Kwon is the former CEO of Terraform Labs, the company behind the stablecoin TrraUSD that collapsed in 2022. This article is an excerpt from Latest Technology News and Product Reviews | New York […]

Parker Solar Probe sends a “Still Alive” tone back to Earth 2024-12-27 at 16:18 By Richard Speed This was a triumph There is good news for Sun botherers: the Parker Solar Probe appears to have survived its close encounter with our nearest star.… This article is an excerpt from The Register View Original Source

The best VPNs for streaming live sports in 2025 2024-12-27 at 16:01 By Nicholas Fearn Calling all sports fan! This article is an excerpt from Latest Technology News and Product Reviews | New York Post View Original Source