Uncategorized

Windows 12: Savior of PC makers, or just an apology for Windows 11? 2023-12-23 at 12:03 By Richard Speed Looking into our crystal ball we can see the end of 2024 will be filled with … AI. So much AI Analysis  Microsoft is betting the farm on AI apathy not hitting before it makes a […]

Rogue WordPress Plugin Exposes E-Commerce Sites to Credit Card Theft 2023-12-22 at 19:46 By Threat hunters have discovered a rogue WordPress plugin that’s capable of creating bogus administrator users and injecting malicious JavaScript code to steal credit card information. The skimming activity is part of a Magecart campaign targeting e-commerce websites, according to Sucuri. “As with many

Cyber sleuths reveal how they infiltrate the biggest ransomware gangs 2023-12-22 at 18:04 By Connor Jones How do you break into the bad guys’ ranks? Master the lingo and research, research, research Feature  When AlphV/BlackCat’s website went dark this month, it was like Chrimbo came early for cybersecurity defenders, some of whom seemingly believed law

Enhancing retail security: Combatting insider theft 2023-12-22 at 16:32 By In the dynamic and ever-changing landscape of the retail sector, the imperative task of thwarting theft has undergone substantial transformations.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

5 retailer strategies to deter holiday smash and grabs 2023-12-22 at 16:32 By As retailers approach the final stretch of this shopping blitz, they must prepare to address heightened risks of ORC and smash-and-grab incidences. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Operation RusticWeb: Rust-Based Malware Targets Indian Government Entities 2023-12-22 at 16:32 By Indian government entities and the defense sector have been targeted by a phishing campaign that’s engineered to drop Rust-based malware for intelligence gathering. The activity, first detected in October 2023, has been codenamed Operation RusticWeb by enterprise security firm SEQRITE. “New Rust-based payloads and encrypted

Hunting for Android Privilege Escalation with a 32 Line Fuzzer 22/12/2023 at 16:02 By Maksymilian Motyl Trustwave SpiderLabs tested a couple of Android OS-based mobile devices to conduct the research on privilege escalation scenarios. Specifically, we wanted to show a straightforward process attackers may use to exploit vulnerabilities in an Android device’s system services and

Decoy Microsoft Word Documents Used to Deliver Nim-Based Malware 22/12/2023 at 16:01 By A new phishing campaign is leveraging decoy Microsoft Word documents as bait to deliver a backdoor written in the Nim programming language. “Malware written in uncommon programming languages puts the security community at a disadvantage as researchers and reverse engineers’ unfamiliarity can hamper

UAC-0099 Using WinRAR Exploit to Target Ukrainian Firms with LONEPAGE Malware 22/12/2023 at 11:49 By The threat actor known as UAC-0099 has been linked to continued attacks aimed at Ukraine, some of which leverage a high-severity flaw in the WinRAR software to deliver a malware strain called LONEPAGE. “The threat actor targets Ukrainian employees working for companies

Microsoft Warns of New ‘FalseFont’ Backdoor Targeting the Defense Sector 22/12/2023 at 09:18 By Organizations in the Defense Industrial Base (DIB) sector are in the crosshairs of an Iranian threat actor as part of a campaign designed to deliver a never-before-seen backdoor called FalseFont. The findings come from Microsoft, which is tracking the activity under

Cisco goes Christmas shopping, buys Cilium project originator Isovalent 22/12/2023 at 08:32 By Simon Sharwood Swithchzilla likes what eBPF does for multicloud networking and security Cisco has bought itself a Christmas present: Isovalent, the startup that originated Cilium, an open source networking, observability, and security tool recently graduated to full project status by the Cloud

China bans export of rare earth processing kit 22/12/2023 at 05:47 By Simon Sharwood Beijing also wants its human gene-editing kit – and LiDAR– to stay at home China has added a host of technologies related to rare earth production to its list of restricted exports.… This article is an excerpt from The Register View

Programmable or ‘purpose-bound’ money is coming, probably as a feature in central bank digital currencies 22/12/2023 at 02:19 By Laura Dobberstein Governments may dictate where or when you use it, but it’s not a gift card Interview  As the tide of enthusiasm for cryptocurrency ebbs, new forms of digital currency are emerging, including something called

Lapsus$ teen sentenced to indefinite detention in hospital after Nvidia, GTA cyberattacks 22/12/2023 at 01:18 By Jessica Lyons Hardcastle Arion Kurtaj will remain hospitalized until a mental health tribunal says he can leave Two British teens who were members of the Lapsus$ gang have been sentenced for their roles in a cyber-crime spree that included

Philips recalls 340 MRI machines because they may explode in an emergency 22/12/2023 at 00:17 By Tobias Mann Rapid unscheduled disassembly not exactly a desirable quality for medical imaging equipment Philips is recalling hundreds of MRI machines around the globe over concerns the medical imaging equipment could explode during normal operation — something a US

FTC wants to crack down on Big Biz profiting from kids’ data 21/12/2023 at 23:19 By Jessica Lyons Hardcastle COPPA changes on the horizon. Meta, Amazon and friends must be thrilled It will soon be more difficult for corporations to collect and monetize kids’ data in the US if the FTC goes ahead with several

Intel trims a few hundred workers in Cali just in time for Christmas 21/12/2023 at 22:35 By Tobias Mann Merry Xmas! Now get out For 311 workers in Santa Clara and Folsom, California, it wasn’t the Grinch who stole Christmas: it was Intel.… This article is an excerpt from The Register View Original Source

Malware targeting video came users discovered by researchers 21/12/2023 at 20:32 By A new malware scam was discovered by ReasonLabs, affecting individuals attempting to download torrented versions of popular video games.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Chameleon Android Banking Trojan Variant Bypasses Biometric Authentication 21/12/2023 at 20:16 By Cybersecurity researchers have discovered an updated version of an Android banking malware called Chameleon that has expanded its targeting to include users in the U.K. and Italy. “Representing a restructured and enhanced iteration of its predecessor, this evolved Chameleon variant excels in executing

Experts Detail Multi-Million Dollar Licensing Model of Predator Spyware 21/12/2023 at 20:16 By A new analysis of the sophisticated commercial spyware called Predator has revealed that its ability to persist between reboots is offered as an “add-on feature” and that it depends on the licensing options opted by a customer. “In 2021, Predator spyware couldn’t