Uncategorized

I stole 20GB of data from Capgemini – and now I’m leaking it, says cyber-crook 2024-09-13 at 00:01 By Jessica Lyons Allegedly pilfered database has source code, private keys, staff info, T-Mobile VM logs, more A miscreant claims to have broken into Capgemini and leaked a large amount of sensitive data stolen from the technology

Google sued for using trademarked Gemini name for AI service 2024-09-12 at 23:03 By Thomas Claburn Even the chatbot allegedly admits to infringement claim Gemini Data, which offers an enterprise AI platform, has sued Google for calling its own AI service by the same name.… This article is an excerpt from The Register View Original

Mastercard splurges $2.65B on another big cyber buy – Recorded Future 2024-09-12 at 22:16 By Iain Thomson The startup is already the go-to intel shop for 45 govs and half the Fortune 100 Mastercard has added another security asset to its growing portfolio, laying down $2.65 billion for threat intelligence giant Recorded Future.… This article

Adobe patches Acrobat bug, neglects to mention whole zero-day, exploit thing 2024-09-12 at 21:31 By Connor Jones SaaS seller sets severity to ‘critical’ Adobe’s patch for a remote code execution (RCE) bug in Acrobat doesn’t mention that the vulnerability is considered a zero-day nor that a proof-of-concept (PoC) exploit exists, a researcher warns.… This article

Boeing to launch quantum comms satellite testbed in 2026 2024-09-12 at 20:32 By Brandon Vigliarolo After Starliner stumbles, the aerospace giant eyes a new frontier – entanglement swapping in space Undeterred by the problems of its Starliner crewed space capsule, Boeing has a plan to do a bit of uncrewed science – launching a satellite

Urgent: GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Job Execution 2024-09-12 at 20:16 By GitLab on Wednesday released security updates to address 17 security vulnerabilities, including a critical flaw that allows an attacker to run pipeline jobs as an arbitrary user. The issue, tracked as CVE-2024-6678, carries a CVSS score of 9.9 out of a

New Android Malware ‘Ajina.Banker’ Steals Financial Data and Bypasses 2FA via Telegram 2024-09-12 at 20:16 By Bank customers in the Central Asia region have been targeted by a new strain of Android malware codenamed Ajina.Banker since at least November 2024 with the goal of harvesting financial information and intercepting two-factor authentication (2FA) messages. Singapore-headquartered Group-IB,

Google Chrome gets a mind of its own for some security fixes 2024-09-12 at 19:08 By Thomas Claburn Browser becomes more proactive about trimming unneeded permissions and deceptive notifications Google has enhanced Chrome’s Safety Check so that it can make some security decisions on the user’s behalf.… This article is an excerpt from The Register

Transport for London confirms 5,000 users’ bank data exposed, pulls large chunks of IT infra offline 2024-09-12 at 18:06 By Richard Speed Hauling in 30,000 staff IN PERSON to do password resets Breaking  Transport for London’s ongoing cyber incident has taken a dark turn as the organization confirmed that some data, including bank details, might

AMD sharpens silicon swords to take on chip and AI rivals 2024-09-12 at 17:46 By Dan Robinson CEO Lisa Su sets sights on being best in GPUs, CPUs, FPGAs, everything… as Intel struggles Comment  Once the relative minnow of the chip industry, AMD senses blood in the water following a series of misstesp by arch

Major ISP bungles settings, causing Microsoft 365, Azure outage 2024-09-12 at 17:33 By Brandon Vigliarolo Nope, it’s not just you If you’re having issues logging into Azure this morning, no – it’s not just you: Microsoft has confirmed an issue. … This article is an excerpt from The Register View Original Source

Beware: New Vo1d Malware Infects 1.3 Million Android TV Boxes Worldwide 2024-09-12 at 17:33 By Nearly 1.3 million Android-based TV boxes running outdated versions of the operating system and belonging to users spanning 197 countries have been infected by a new malware dubbed Vo1d (aka Void). “It is a backdoor that puts its components in

SpaceX Polaris Dawn mission completes first commercial EVA 2024-09-12 at 17:02 By Richard Speed More cautious than 1960s efforts, spacewalk goes off without a hitch SpaceX’s inaugural commercial spacewalk and the first EVA using its spacesuits has taken place, almost eclipsing yesterday’s altitude record.… This article is an excerpt from The Register View Original Source

Exposed Selenium Grid Servers Targeted for Crypto Mining and Proxyjacking 2024-09-12 at 16:31 By Internet-exposed Selenium Grid instances are being targeted by bad actors for illicit cryptocurrency mining and proxyjacking campaigns. “Selenium Grid is a server that facilitates running test cases in parallel across different browsers and versions,” Cado Security researchers Tara Gould and Nate

Redis justifies open source shift with fresh hardware, LLM cost-saving features 2024-09-12 at 16:16 By Lindsay Clark CEO argues more restrictive licensing was key to DB refresh, and says team ‘expected’ the fork Interview  Redis is the most popular database on AWS, which is, of course, the most popular cloud. The fact the relatively little

EU kicks off an inquiry into Google’s AI model 2024-09-12 at 15:17 By Richard Speed Privacy regulator taking a closer look at data privacy and PaLM 2 The European Union’s key regulator for data privacy, Ireland’s Data Protection Commission (DPC), has launched a cross-border inquiry into Google’s AI model to ascertain if it complies with

About that Windows Installer ‘make me admin’ security hole. Here’s how it’s exploited 2024-09-12 at 14:46 By Iain Thomson What kind of OS can be hijacked by clicking a link at just the right time? Microsoft’s In this week’s Patch Tuesday Microsoft alerted users to, among other vulnerabilities, a flaw in Windows Installer that can

Iranian Cyber Group OilRig Targets Iraqi Government in Sophisticated Malware Attack 2024-09-12 at 14:32 By Iraqi government networks have emerged as the target of an “elaborate” cyber attack campaign orchestrated by an Iran state-sponsored threat actor called OilRig. The attacks singled out Iraqi organizations such as the Prime Minister’s Office and the Ministry of Foreign