Uncategorized

Shifting to two-factor auth is hard to do, so GitHub recommends the long game 10/08/2023 at 20:18 By Iain Thomson Slow and steady wins this race Black Hat  Getting people to use multi-factor authentication is surprisingly tough – or unsurprisingly, depending on your opinion of IT users. In any case, GitHub is managing it by […]

NASA to test potential 400Mbps laser link for Mars 10/08/2023 at 19:06 By Katyanna Quach High bandwidth comms experiment to fly with Psyche asteroid mission in October NASA hopes to launch a near-infrared laser transceiver to test a system that could one day be used to communicate with astronauts on Mars.… This article is an

New Attack Alert: Freeze[.]rs Injector Weaponized for XWorm Malware Attacks 10/08/2023 at 18:15 By Malicious actors are using a legitimate Rust-based injector called Freeze[.]rs to deploy a commodity malware called XWorm in victim environments. The novel attack chain, detected by Fortinet FortiGuard Labs on July 13, 2023, is initiated via a phishing email containing a booby-trapped PDF

Google AI red team lead says this is how criminals will likely use ML for evil 10/08/2023 at 17:49 By Jessica Lyons Hardcastle Prompt injection, data poisoning just to name a couple DEF CON  Artificial intelligence is an equalizer of sorts between security defenders and attackers.… This article is an excerpt from The Register View

Q2 of 2023 saw a rise in spam calls featuring family impersonations 10/08/2023 at 17:49 By According to a fraud report, while the overall volume of spam calls declined from Q1, data collected showed that the rate of fraud calls increased. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original

5 Reasons to Pursue a Career in Cybersecurity 10/08/2023 at 17:18 By Cyberattacks have not only become more frequent, sophisticated, and costly, but they are not about to stop. This means unprepared organizations right now are scrambling to protect their sensitive data and systems and part of this scramble is finding people to staff their

New Statc Stealer Malware Emerges: Your Sensitive Data at Risk 10/08/2023 at 17:18 By A new information malware strain called Statc Stealer has been found infecting devices running Microsoft Windows to siphon sensitive personal and payment information. “Statc Stealer exhibits a broad range of stealing capabilities, making it a significant threat,” Zscaler ThreatLabz researchers Shivam Sharma and

Have you ever suspected your colleague doesn’t hope this email finds you well?* 10/08/2023 at 16:49 By Jude Karabus Grrrrrrr…. Why are you sending 15 bloody messages in 10 seconds? Stop pressing return Poll  It was international coworking day this week, which quite a few corporates used to get people excited about coming into the

Gootloader: Why your Legal Document Search May End in Misery 10/08/2023 at 16:05 By Recently, we’ve seen a noticeable surge in malware cases linked to a malicious payload delivery system known as Gootloader. This article is an excerpt from SpiderLabs Blog from Trustwave View Original Source

Is the “human factor” in security breaches over blown? 10/08/2023 at 15:18 By Google “breaches and human error” and be greeted with a seemingly endless list of articles that declare 82%, 88%, and even 95% of breaches are the result of human error. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed

GNOME 45 beta: Less buggy, more colorful, and still not your grandma’s desktop 10/08/2023 at 14:49 By Liam Proven Codenamed Riga after the venue for this year’s GUADEC conference GNOME 45 has just graduated from alpha test to beta, and will see final release late next month. Here is what to expect.… This article is

Emerging Attacker Exploit: Microsoft Cross-Tenant Synchronization 10/08/2023 at 14:32 By Attackers continue to target Microsoft identities to gain access to connected Microsoft applications and federated SaaS applications. Additionally, attackers continue to progress their attacks in these environments, not by exploiting vulnerabilities, but by abusing native Microsoft functionality to achieve their objective. The attacker group Nobelium,

Encryption Flaws in Popular Chinese Language App Put Users’ Typed Data at Risk 10/08/2023 at 14:32 By A widely used Chinese language input app for Windows and Android has been found vulnerable to serious security flaws that could allow a malicious interloper to decipher the text typed by users. The findings from the University of

Cybercriminals Increasingly Using EvilProxy Phishing Kit to Target Executives 10/08/2023 at 13:18 By Threat actors are increasingly using a phishing-as-a-service (PhaaS) toolkit dubbed EvilProxy to pull off account takeover attacks aimed at high-ranking executives at prominent companies. According to Proofpoint, an ongoing hybrid campaign has leveraged the service to target thousands of Microsoft 365 user

Get your staff’s consent before you monitor them, tech inquiry warns 10/08/2023 at 13:03 By Jude Karabus Plus: British government’s push to reform data protection is working against the cause Companies that monitor their employees should only do so after they consult with and get consent from the staffers they are watching or tracking.… This

Larry Ellison a major contributor to Blaire Institute vaccine database plan 10/08/2023 at 11:47 By Lindsay Clark A relationship forged in UK government IT continues to blossom Software magnate Larry Ellison is a leading contributor to the policy institute built by former UK prime minister Tony Blair.… This article is an excerpt from The Register

Infosys launches ‘sonic identity’ – an aural logo to ‘reinforce brand purpose’ 10/08/2023 at 10:47 By Simon Sharwood It’s a ‘digital metaphor’ that signals the sound of opportunity, apparently LogoWatch  Indian tech services giant Infosys has launched a “sonic identity” that The Register‘s irregular marketing column Logo Watch feels compelled to cover because the outfit

Interpol Busts Phishing-as-a-Service Platform ’16Shop,’ Leading to 3 Arrests 10/08/2023 at 10:19 By Interpol has announced the takedown of a phishing-as-a-service (PhaaS) platform called 16Shop, in addition to the arrests of three individuals in Indonesia and Japan. 16Shop specialized in the sales of phishing kits that other cybercriminals can purchase to mount phishing attacks on

Most distant observed star is blue – and it isn’t alone 10/08/2023 at 09:46 By Brandon Vigliarolo Light from Earendel takes 12.9 billion years to reach Earth, and it’s serendipitous the JWST can see it at all It was a little more than a year ago that NASA’s Hubble Space Telescope spotted the most distant

Biden Administration restricts US investment in tech China’s military might employ 10/08/2023 at 08:33 By Laura Dobberstein Venture capital is helping Beijing arm and Washington wants that to stop US President Joe Biden on Wednesday issued an Executive Order restricting stateside investors from sinking their funds into Chinese firms developing certain technologies, as part of