Uncategorized

Just one bad DNS packet can bring down a public DNSSEC server 2024-02-14 at 01:31 By Thomas Claburn ‘You don’t have to do more than that to disconnect an entire network’ El Reg told as patches emerge A 20-plus-year-old security vulnerability in the design of DNSSEC (Domain Name System Security Extensions) could allow a single […]

US patents boss cannot stress enough that inventors must be human, not AI 2024-02-14 at 00:16 By Katyanna Quach You can use neural networks to help, sure, but not do all the work The US Patent and Trademark Office this week repeated loud and clear it will only accept patent applications that list actual real

QNAP vulnerability disclosure ends up an utter shambles 2024-02-13 at 22:17 By Connor Jones Two new flaws, one zero-day, countless different patches, but everything’s fine! Network-attached storage (NAS) specialist QNAP has disclosed and released fixes for two new vulnerabilities, one of them a zero-day discovered in early November.… This article is an excerpt from The

Security experts discuss recent Bank of America data breach 2024-02-13 at 21:46 By The Bank of America experienced a security breach, revealing the personal identifiable information of more than 50,0000 affected users. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

ALPHV blackmails Canadian pipeline and claims it stole 190GB of vital info 2024-02-13 at 21:31 By Jessica Lyons Gang going after critical infrastructure because it’s…you know Canada’s Trans-Northern Pipelines has allegedly been breached by the ALPHV/BlackCat ransomware crew, which claims to have stolen 190 GB of data from the oil distributor.… This article is an

FCC Commissioner calls for crackdown on Apple’s iMessage gatekeeping 2024-02-13 at 20:47 By Richard Speed Demands investigation into iPhone maker for potentially breaching regulations over Beeper Mini Brendan Carr of the US Federal Communications Commission (FCC) has called on the authority to take a closer look at Apple’s actions in the Beeper Mini affair.… This

CISOs share 5 priorities for 2024 2024-02-13 at 20:47 By Info-Tech research group analyzed the priorities of several chief information security officers (CISOs) for 2024 in their recent report. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Cruise swerves to hire safety guru after series of misadventures on the streets 2024-02-13 at 20:02 By Dan Robinson Robocar company lost license to operate in California Autonomous vehicle biz Cruise has hired a Chief Safety Officer following the dramatic incident last fall when a pedestrian was dragged under the wheels of one of its

Biden admin keeps O-RAN dream alive with $42M funding for R&D facility 2024-02-13 at 19:17 By Brandon Vigliarolo AT&T, Verizon leading new initiative to finally commercialize OpenRAN technology, sans timeline The Biden administration is keeping America’s dreams of a future filled with open radio access network (OpenRAN) kit alive after awarding $42.3 million to a

No One is Immune 2024-02-13 at 18:46 By Tim Murphy Microsoft, HPE, and the Need for Data-Centric Security This article is an excerpt from Broadcom Software Blogs View Original Source

Flipper Zero takes to the big screen 2024-02-13 at 18:32 By Richard Speed RP2040-based Video Game Module brings game controller functionality and video output A Video Game Module (VGM) containing a Raspberry Pi RP2040 microcontroller is out today for the Flipper Zero pentester multi-tool.… This article is an excerpt from The Register View Original Source

Microsoft might have just pulled support for very old PCs in Windows 11 24H2 2024-02-13 at 18:02 By Richard Speed Time to look elsewhere for an operating system for that ancient CPU If you’re running a very old PC but have managed to persuade Windows 11 to boot, it looks like the rug could soon

91% of organizations faced a software supply chain attack last year 2024-02-13 at 18:01 By According to a recent cybersecurity report by Data Theorem, 91% of organizations experienced a software supply chain attack over the last year.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Backblaze’s geriatric hard drives kicked the bucket more in 2023 2024-02-13 at 17:16 By Dan Robinson Failure rates are consistent with aging – something we can all relate to Cloud backup and storage provider Backblaze has published a report on hard drive failures for 2023, finding that rates increased during the year due to aging

PikaBot Resurfaces with Streamlined Code and Deceptive Tactics 2024-02-13 at 16:47 By The threat actors behind the PikaBot malware have made significant changes to the malware in what has been described as a case of “devolution.” “Although it appears to be in a new development cycle and testing phase, the developers have reduced the complexity

Glupteba Botnet Evades Detection with Undocumented UEFI Bootkit 2024-02-13 at 16:47 By The Glupteba botnet has been found to incorporate a previously undocumented Unified Extensible Firmware Interface (UEFI) bootkit feature, adding another layer of sophistication and stealth to the malware. “This bootkit can intervene and control the [operating system] boot process, enabling Glupteba to hide itself and

Crooks hook hundreds of exec accounts after phishing in Azure C-suite pond 2024-02-13 at 16:32 By Connor Jones Plenty of successful attacks observed with dangerous follow-on activity The number of senior business executives stymied by an ongoing phishing campaign continues to rise with cybercriminals registering hundreds of cloud account takeovers (ATOs) since spinning it up

LectureNotes Learning App breach affects over 2 million users 2024-02-13 at 16:16 By Millions of users of the LectureNotes Learning App have had their sensitive information leaked in this data breach.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Tesla’s Cybertruck may not be so stainless after all 2024-02-13 at 15:47 By Richard Currie ‘Literally bulletproof’ but needs constant cleaning to stave off corrosion It’s only been a few months since Tesla’s long-awaited Cybertruck made its way to those at the front of the queue, but the arrival has been tarnished for some.… This

Report: Over 1.76 billion phishing emails were sent in 2023 2024-02-13 at 15:16 By A new report reveals that 2023 saw the highest amount of phishing emails sent globally.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source