Uncategorized

New Variant of DLL Search Order Hijacking Bypasses Windows 10 and 11 Protections 2024-01-01 at 16:17 By Security researchers have detailed a new variant of a dynamic link library (DLL) search order hijacking technique that could be used by threat actors to bypass security mechanisms and achieve execution of malicious code on systems running Microsoft […]

New Terrapin Flaw Could Let Attackers Downgrade SSH Protocol Security 2024-01-01 at 11:47 By Security researchers from Ruhr University Bochum have discovered a vulnerability in the Secure Shell (SSH) cryptographic network protocol that could allow an attacker to downgrade the connection’s security by breaking the integrity of the secure channel. Called Terrapin (CVE-2023-48795, CVSS score: 5.9), the

New JinxLoader Targeting Users with Formbook and XLoader Malware 2024-01-01 at 09:02 By A new Go-based malware loader called JinxLoader is being used by threat actors to deliver next-stage payloads such as Formbook and its successor XLoader. The disclosure comes from cybersecurity firms Palo Alto Networks Unit 42 and Symantec, both of which highlighted multi-step attack sequences that led to

How do you teach a robot dog new tricks? Throw it a string of hex, a crayon, and a canvas 2023-12-31 at 18:17 By Simon Sharwood Artist Agnieszka Pilat tells The Register how she gets Spot to paint, not pant Boston Dynamics’ “Spot” robot dog has been deployed as a tour guide, a police officer,

Google Settles $5 Billion Privacy Lawsuit Over Tracking People Using ‘Incognito Mode’ 2023-12-31 at 01:01 By Associated Press Google agreed to settle a $5 billion privacy lawsuit claiming that it continued spying on people who used the “incognito” mode in its Chrome browser. The post Google Settles $5 Billion Privacy Lawsuit Over Tracking People Using

Scientists mull Solar Radiation Management – a potential climate-change stop-gap 2023-12-30 at 15:18 By Rik Myslewski As we argue over freeing ourselves from fossil fuels, can SRM buy us time to develop green energy we need? In-depth  At the American Geophysical Union annual meeting (AGU23) in San Francisco the other week, the 25,000-plus science folks

Beware: Scam-as-a-Service Aiding Cybercriminals in Crypto Wallet-Draining Attacks 2023-12-30 at 11:46 By Cybersecurity researchers are warning about an increase in phishing attacks that are capable of draining cryptocurrency wallets. “These threats are unique in their approach, targeting a wide range of blockchain networks, from Ethereum and Binance Smart Chain to Polygon, Avalanche, and almost 20

DataNet Systems suffers data breach 2023-12-29 at 16:32 By DataNet Systems gas announced that the company experienced a data breach affecting District of Columbia (D.C.) voters, including email addresses. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Albanian Parliament and One Albania Telecom Hit by Cyber Attacks 2023-12-29 at 16:31 By The Assembly of the Republic of Albania and telecom company One Albania have been targeted by cyber attacks, the country’s National Authority for Electronic Certification and Cyber Security (AKCESK) revealed this week. “These infrastructures, under the legislation in force, are not

NAT, ATM, decentralized search – and other outrageous opinions from the 1990s 2023-12-29 at 15:32 By Bruce Davie The predictions that turned out correct … and the ones we wished were right Systems Approach  The end of the year is often a time for people in tech to make predictions, but rather than making our

New data reveals the states at highest risk of cybercrime 2023-12-29 at 15:17 By According to new data, residents of Nevada face a greater susceptibility to cyberattacks compared to those in all other states.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

CERT-UA Uncovers New Malware Wave Distributing OCEANMAP, MASEPIE, STEELHOOK 2023-12-29 at 14:02 By The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new phishing campaign orchestrated by the Russia-linked APT28 group to deploy previously undocumented malware such as OCEANMAP, MASEPIE, and STEELHOOK to harvest sensitive information. The activity, which was detected by the agency between December 15 and

Is it time for 6G already? Traffic analysis says yep 2023-12-29 at 12:18 By Dan Robinson 5G networks won’t have the capacity to cope by end of the decade If you think 5G networks have failed to live up to their promise, you’re not alone. But the tech is still early on in implementation, although

Kimsuky Hackers Deploying AppleSeed, Meterpreter, and TinyNuke in Latest Attacks 2023-12-29 at 11:33 By Nation-state actors affiliated to North Korea have been observed using spear-phishing attacks to deliver an assortment of backdoors and tools such as AppleSeed, Meterpreter, and TinyNuke to seize control of compromised machines. South Korea-based cybersecurity company AhnLab attributed the activity to

Microsoft Disables MSIX App Installer Protocol Widely Used in Malware Attacks 2023-12-29 at 08:17 By Microsoft on Thursday said it’s once again disabling the ms-appinstaller protocol handler by default following its abuse by multiple threat actors to distribute malware. “The observed threat actor activity abuses the current implementation of the ms-appinstaller protocol handler as an access vector

Amazon already has a colossal ads business and will extend it to Prime Video in January 2023-12-29 at 06:02 By Simon Sharwood E-tail giant seeks profitability for its vid-streaming service and a classic Big Tech dominance play Analysis  Amazon.com has emailed US-based subscribers to its Prime Video service to advise them that ads will start

Irony alert: Lawsuit alleging Chrome’s Incognito Mode isn’t will settle on unknown terms 2023-12-29 at 03:33 By Simon Sharwood Google accused of tracking you even when you think it won’t The lawsuit brought against Google by netizens upset Incognito Mode in Chrome did not fully anonymize their activities looks set to settle before going to

Nvidia slowed RTX 4090 GPU by 11 percent, to make it 100 percent legal for export to China 2023-12-29 at 01:36 By Tobias Mann For now Nvidia’s GeForce RTX 4090 GPU is back on sale in China – in a less capable configuration version designed to comply with US restrictions on exports into the Middle

NASA Juno probe to open ‘firehose of data’ during close flyby of Jupiter moon 2023-12-28 at 22:17 By Richard Speed Io, Io, it’s off to work we go NASA’s Juno mission is to close out 2023 with a low pass over Io, one of Jupiter’s many moons.… This article is an excerpt from The Register