At the Intersection of Technology and Real Life

New macOS Threat Served from Cryptocurrency Trading Platform

Michael York Reading, PA Bleeping Computer, Syndicated Stories

Security researchers have encountered a new macOS malware sample believed to be the work of the North Korean group of hackers known as Lazarus. […] Read the full article here

Latest Headlines

Hundreds of Ways to Get S#!+ Done—and We Still Don’t

27 July 2021

You want to be productive. Software wants to help. But even with a glut of tools claiming to make us all into taskmasters, we almost never master our tasks. [...]

A People’s History of Black Twitter, Part II

22 July 2021

No longer just an online movement, Black Twitter takes to the streets—and finds its voice. [...]

A People’s History of Black Twitter, Part I

15 July 2021

From #UKnowUrBlackWhen to #BlackLivesMatter, how a loose online network became a pop culture juggernaut, an engine of social justice, and a lens into the future. [...]

A Son Is Rescued at Sea. But What Happened to His Mother?

13 July 2021

Nathan Carman went fishing with his mom. A week later, he was found on a life raft—alone. Tragic accident or murder? Ocean sensors may point to the truth. [...]

Prisoners, Doctors, and the Battle Over Trans Medical Care

8 July 2021

Those who are incarcerated are suing for their right to gender confirmation surgery—if deemed necessary. Meet the psychiatrist who almost always says it's not. [...]

When the Next Animal Plague Hits, Can This Lab Stop It?

6 July 2021

A new federal facility in Kansas will house the deadliest agricultural pathogens in the world—and researchers working tirelessly to contain them. [...]

How Fringe Stem Cell Treatments Won Allies on the Far Right

1 July 2021

Advocates for dubious therapies (fight Covid with your own fat!) have latched on to conservative grievances—and formed an unholy alliance. [...]

How to Survive the Worst Tornado in US History

24 June 2021

It blew an entire town to pieces, flipping trains and flattening banks. But there’s one place you might try to hide. [...]

He Thought He Could Outfox the Gig Economy. He Was Wrong

22 June 2021

Jeffrey Fang was a ride-hailing legend, a top earner with relentless hustle. Then his minivan was carjacked—with his kids in the back seat. [...]

The Lithium Mine Versus the Wildflower

17 June 2021

The deposit could power 400,000 clean-energy car batteries. There’s just one roadblock: a rare, fragile species of buckwheat, which for a mine might mean extinction. [...]

New US security memorandum bolsters critical infrastructure cybersecurity

28 July 2021

US President Joe Biden today issued a national security memorandum designed to help strengthen the security of critical infrastructure by setting baseline performance goals for critical infrastructure owners and operators. [...]

Biden: Severe cyberattacks could escalate to 'real shooting war'

28 July 2021

President Joe Biden warned that cyberattacks leading to severe security breaches could lead to a "real shooting war" with another major world power. [...]

Google Play Protect fails Android security tests once more

28 July 2021

Google Play Protect, the Android built-in malware defense system, has failed the real-world tests of antivirus testing lab AV-TEST after detecting just over two thirds out of more than 20,000 malicious apps it was pitted against. [...]

Google: Android apps must provide privacy information by April 2022

28 July 2021

Google has announced today more details regarding their upcoming Google Play 'Safety section' feature that provides users information about the data collected and used by an Android app. [...]

Critical Microsoft Hyper-V bug could haunt orgs for a long time

28 July 2021

Technical details are now available for a vulnerability that affects Hyper-V, Microsoft's native hypervisor for creating virtual machines on Windows systems and in Azure cloud computing environment. [...]

FBI reveals top targeted vulnerabilities of the last two years

28 July 2021

A joint security advisory issued today by several cybersecurity agencies from the US, the UK, and Australia reveals the top 30 most targeted security vulnerabilities of the last two years. [...]

Northern Ireland suspends vaccine passport system after data leak

28 July 2021

Northern Ireland's Department of Health (DoH) has temporarily halted its COVID-19 vaccine certification web service and mobile apps following a data exposure incident. [...]

LockBit ransomware now encrypts Windows domains using group policies

27 July 2021

An new version of the LockBit 2.0 ransomware has been found that automates the encryption of a Windows domain using Active Directory group policies. [...]

UC San Diego Health discloses data breach after phishing attack

27 July 2021

UC San Diego Health, the academic health system of the University of California, San Diego, has disclosed a data breach after the compromise of some employees' email accounts. [...]

New Windows 10 KB5005394 emergency update fixes printing issues

27 July 2021

Microsoft has released a cumulative out-of-band update to fix a known printing issue preventing some printers and scanners from working correctly. [...]

The Suicide Squad review: A gory, glorious and deranged delight - CNET

29 July 2021

James Gunn's 2021 take on the DC comics supervillain squad is cinematic trash poetry. [...]

Prime Video: Everything coming in August 2021 - CNET

29 July 2021

Quiet month, but still some unmissable stuff on Prime Video this August. [...]

Here's why Team USA's face masks make them look like Batman villains - CNET

29 July 2021

You can get your own version of the Bane-style mask, but it'll cost you. [...]

Robinhood IPO prices shares at $38, for $32B valuation - CNET

29 July 2021

Shares in the stock-trading app priced at the low end of the expected range. [...]

Google to require vaccinations for on-campus work, postpones return to office - CNET

29 July 2021

Apple, Facebook, Twitter and Netflix are also updating their COVID-19 protocols. [...]

Activision Blizzard lawsuit: Walkout, CEO response and everything you need to know - CNET

29 July 2021

Over 2,000 employees signed an open letter to company management. The CEO responded, then hundreds of workers staged a walkout. Here's what you need to know. [...]

BMW debuts 2 very cool new electric scooter concepts that it won't build - Roadshow

29 July 2021

But that doesn't mean it won't have someone else build them instead. [...]

Samsung's quarterly profit surges on chips, consumer electronics - CNET

28 July 2021

Revenue from its mobile division declined due to the pandemic and ongoing component shortages. [...]

Bob Odenkirk 'stable' after collapsing on Better Call Saul set - CNET

28 July 2021

"He's going to be okay." [...]

GM may let Camaro die so an electric sedan can live, report says - Roadshow

28 July 2021

The rumors say that the Camaro will be left alone until 2024, when it is scheduled for a new generation anyway, then killed off in favor of an electric performance sedan. [...]

8 Security Tools to be Unveiled at Black Hat USA

28 July 2021

Security researchers and practitioners share a host of new cyber tools for penetration testing, reverse engineering, malware defense, and more. [...]

Biden Administration Responds to Geopolitical Cyber Threats

23 July 2021

In response to growing concerns regarding the recent uptick in large-scale, nation-state-backed ransomware attacks on critical infrastructure, the Biden administration is taking new action to tackle the evolving challenges posed by ransomware attacks. [...]

7 Hot Cyber Threat Trends to Expect at Black Hat

22 July 2021

A sneak peek of some of the main themes at Black Hat USA next month. [...]

Law Firm for Ford, Pfizer, Exxon Discloses Ransomware Attack

19 July 2021

Campbell Conroy & O'Neil reports the attack affected personal data including Social Security numbers, passport numbers, and payment card data for some individuals. [...]

US Accuses China of Using Criminal Hackers in Cyber Espionage Operations

19 July 2021

DOJ indicts four Chinese individuals for alleged role in attacks targeting intellectual property, trade secrets belonging to defense contractors, maritime companies, aircraft service firms, and others. [...]

How Gaming Attack Data Aids Defenders Across Industries

19 July 2021

Web application attacks against the video game industry quadrupled in 2020 compared to the previous year, but companies outside entertainment can learn from the data. [...]

NSO Group Spyware Used On Journalists & Activists Worldwide

19 July 2021

An investigation finds Pegasus spyware, intended for use on criminals and terrorists, has been used in targeted campaigns against others around the world. [...]

When Ransomware Comes to (Your) Town

19 July 2021

While steps for defending against a ransomware attack vary based on the size of the government entity and the resources available to each one, rooting out ransomware ultimately will come down to two things: system architecture and partnerships. [...]

Breaking Down the Threat of Going All-In With Microsoft Security

19 July 2021

Limit risk by dividing responsibility for infrastructure, tools, and security. [...]

7 Ways AI and ML Are Helping and Hurting Cybersecurity

19 July 2021

In the right hands, artificial intelligence and machine learning can enrich our cyber defenses. In the wrong hands, they can create significant harm. [...]

Five Practical Steps to Implementing a Zero-Trust Network

26 May 2021

How should organizations go about applying a Zero Trust blueprint across their complex hybrid networks? Here are five key steps. [...]

Facebook Shuts Down Two Hacking Groups in Palestine

21 April 2021

Facebook says it has taken action against two groups of hackers originating from Palestine that abused its infrastructure for malware distribution and account compromise across the Internet. [...]

Cloud Security Alliance Shares Security Guidance for Crypto-Assets Exchange

13 April 2021

The Cloud Security Alliance (CSA) has released new Crypto-Asset Exchange Security Guidelines, a set of guidelines and best practices for crypto-asset exchange (CaE) security. [...]

Intel Corp. to Speak at SecurityWeek Supply Chain Security Summit

9 March 2021

Join Intel on Wednesday, March 10, at SecurityWeek’s Supply Chain Security Summit, where industry leaders will examine the current state of supply chain attacks. Hear Intel’s experts discuss the need for transparency and integrity across the complete product lifecycle, from build to retire. [...]

GitHub Hires Former Cisco Executive Mike Hanley as Chief Security Officer

24 February 2021

Software development platform GitHub announced on Wednesday that it has hired Mike Hanley as its new Chief Security Officer (CSO). [...]

Reddit Names Allison Miller as Chief Information Security Officer (CISO)

23 February 2021

Social news community site Reddit announced has hired Allison Miller as Chief Information Security Officer (CISO) and VP of Trust. [...]

SecurityWeek Names Ryan Naraine as Editor-at-Large

19 January 2021

SecurityWeek has named Ryan Naraine as Editor-at-Large, adding a veteran cybersecurity journalist and podcaster to its editorial team. [...]

Why Cyber Security Should Be at the Top of Your Christmas List

17 December 2020

To take advantage of emerging trends in both technology and cyberspace, businesses need to manage risks in ways beyond those traditionally handled by the information security function. [...]

United States Federal Government’s Shift to Identity-Centric Security

17 December 2020

Governments are increasingly facing new legislation, standards, frameworks, and policies to protect critical and sensitive information. [...]

How Extreme Weather Will Create Chaos on Infrastructure

21 October 2020

Extreme weather events will soon become more frequent and widespread, devastating areas of the world that typically don’t experience them and amplifying the destruction in areas that do. [...]

Samsung posts highest profit in 3 years from server and PC memory demand

29 July 2021

Samsung's chip business contributed over half of the profit during the quarter thanks to strong demand for memory chips. [...]

Boost Mobile to stay on Telstra network for another decade

29 July 2021

Virtual operator said it will look at moving into postpaid mobile and NBN plans. [...]

Hackers breach UC San Diego hospital, gaining access to SSNs and medical info of patients, employees, and students

28 July 2021

The attackers gained access to personal data ranging from claims information to laboratory results, prescriptions, treatments, SSNs, payment card numbers or financial account information. [...]

Chipmaker Ampere to acquire AI startup OnSpecta

28 July 2021

OnSpecta's deep learning expertise will help Ampere deliver a better platform for inference task processing. [...]

Garmin CEO cites revenue growth from cycling products and advanced wearables after Q2 success

28 July 2021

Garmin reported a record revenue of $1.3 billion and a GAAP EPS of $1.64. [...]

McDonald's touts tech advancements and digital BTS initiative after delivering strong Q2

28 July 2021

The company's digital system-wide sales across the top six markets were nearly $8 billion in the first-half of 2021, a 70% increase versus last year. [...]

Cognizant meets Q2 expectations with revenue up across segments

28 July 2021

Digital infrastructure business Equinix and industrial IOT company PTC also reported solid results on Wednesday. [...]

Zoom zooms in on contact centers and capitalizes on its momentum in the enterprise

28 July 2021

Last week, in the largest acquisition deal in the contact center industry, Zoom announced its intent to acquire Five9 for $14.7 billion -- a solid move. [...]

PayPal delivers strong Q2, adds 11.4 million net new active accounts

28 July 2021

PayPal reported a net revenue of $6.24 billion for Q2 while also surpassing 400 million total active accounts. [...]

ServiceNow delivers strong Q2, ups subscription revenue outlook

28 July 2021

ServiceNow ended the quarter with 1,201 customers with more than $1 million in contract value, up 25% from a year ago. [...]

Data Breach Costs at Record High, Zero Trust, AI and Automation Help Reduce Costs

28 July 2021

Data breaches have been growing in numbers and scale, taking longer to detect and contain. The average total cost of a data breach is at its highest of 17 years, at $4.24 million. The year over year increase of 10% is the largest single year cost increase recorded in the last 7 years. IBM and […] The post Data Breach Costs at Record High, Zero Trust, AI and Automation Help Reduce Costs appeared first on Security Intelligence. [...]

What’s New in the 2021 Cost of a Data Breach Report

28 July 2021

Has cybersecurity ever been more important than it is right now? Even in these extraordinary times, with its focus on manufacturing vaccines and getting shots into arms, new research in the Cost of a Data Breach Report shows that the increasing cost of security breaches makes preventing and responding to these threats a critical concern. […] The post What’s New in the 2021 Cost of a Data Breach Report appeared first on Security Intelligence. [...]

Double Encryption: When Ransomware Recovery Gets Complicated

26 July 2021

Ever hear of double extortion? It’s a technique increasingly employed by ransomware attackers. A malware payload steals a victim’s plaintext information before launching its encryption routine. Those operating the ransomware then go on to demand two ransoms — one for a decryption utility and the other for the deletion of the victim’s stolen information from […] The post Double Encryption: When Ransomware Recovery Gets Complicated appeared first on Security Intelligence. [...]

How AI Will Transform Data Security

23 July 2021

I’ve often wondered whether artificial intelligence (AI) in cybersecurity is a good thing or a bad thing for data security. Yes, I love the convenience of online stores suggesting the perfect items for me based on my search history, but other times it feels a bit creepy to have a pair of shoes I looked […] The post How AI Will Transform Data Security appeared first on Security Intelligence. [...]

API Abuse Is a Data Security Issue Here to Stay

23 July 2021

Just about every app uses an application programming interface (API). From a security standpoint, though, APIs also come with some common problems. Gartner predicted that API abuse will be the most common type of attack seen in 2022. So, what problems exactly do APIs face? And what can data security defenders do about it? Prevalent […] The post API Abuse Is a Data Security Issue Here to Stay appeared first on Security Intelligence. [...]

Thriving in Chaos: How Cyber Resilience Works

22 July 2021

In cybersecurity as in most jobs, problems don’t happen one at a time, you’re bound to have a few at once. Speakers at the RSA Conference 2021 talked about this in terms of maintaining cyber resilience in chaos. So, what does the buzzword ‘cyber resilience’ really mean? And why is it important to be able […] The post Thriving in Chaos: How Cyber Resilience Works appeared first on Security Intelligence. [...]

This Chat is Being Recorded: Egregor Ransomware Negotiations Uncovered

21 July 2021

Ransomware attacks are topping the charts as the most common attack type to target organizations with a constant drumbeat of attacks impacting industries across the board. In fact, IBM Security X-Force has seen a more than 10% increase in ransomware incident response requests compared to this time last year. Ransomware is well on its way […] The post This Chat is Being Recorded: Egregor Ransomware Negotiations Uncovered appeared first on Security Intelligence. [...]

Beyond Ransomware: Four Threats Facing Companies Today

21 July 2021

The recent DarkSide attack makes it clear: no system is safe from ransomware. And while the attackers say they weren’t out to hurt anyone, only to make money, the impact is the same. It could lead to potential disruptions of critical services across the country. At the same time, it stokes fears that similar attacks […] The post Beyond Ransomware: Four Threats Facing Companies Today appeared first on Security Intelligence. [...]

How to Fix the Big Problems With Two-Factor and Multifactor Authentication

20 July 2021

Getting a second opinion is a great idea in both medicine and end-user cybersecurity. Two-factor authentication (2FA) and multifactor authentication (MFA) are powerful tools in the fight against all kinds of cyberattacks that involve end-user devices and internet-based services. There’s just one big problem: it’s far, far too common for people to use text messaging […] The post How to Fix the Big Problems With Two-Factor and Multifactor Authentication appeared first on Security Intelligence. [...]

Avoid Blind Spots: Is Your Incident Response Team Cloud Ready?

20 July 2021

The year 2020 — with all its tumult — ushered in a massive shift in the way most companies work. Much of that transformation included migrating to cloud, with some statisticians reporting that a full 50% of companies across the globe are now using cloud technology. In many ways, that’s good — cloud holds several […] The post Avoid Blind Spots: Is Your Incident Response Team Cloud Ready? appeared first on Security Intelligence. [...]

US Acting to Better Protect Infrastructure From Cyberthreats

28 July 2021

The Biden administration is taking steps to harden cybersecurity defenses for critical infrastructure, announcing on Wednesday the development of performance goals and a voluntary public-private partnership to protect core sectors. read more [...]

Foxit Plugs Multiple Security Holes in PDF Reader, Editor

28 July 2021

Foxit Software this week released security updates for its PDF Reader and PDF Editor applications, to address multiple vulnerabilities, including some leading to remote code execution. read more [...]

US Gov Warning: VPN, Network Perimeter Product Flaws Under Constant Attack

28 July 2021

The U.S. government and its allies are pleading with defenders to pay attention to gaping holes in perimeter-type devices, warning that advanced threat actors are feasting on known security defects in VPN appliances, network product gateways and enterprise cloud applications. read more [...]

Cyber Asset Management Platform Noetic Launches With $20 Million in Funding

28 July 2021

Cyber asset management and controls platform Noetic Cyber emerged from stealth mode today and also announced that it has raised $20 million in Series A funding. read more [...]

Hospital Network Reveals Cause of 2020 Cyberattack

28 July 2021

A cyberattack that crippled the computer systems of a hospital network affecting six hospitals in Vermont and New York last fall happened after an employee opened a personal email on a company laptop while on vacation, a University of Vermont Health Network official said Tuesday. read more [...]

Leveraging People in the Email Security Battle

28 July 2021

A combination of humans and technology is needed to truly move the needle on email security read more [...]

Survey Shows Reasons for Cloud Misconfigurations are Many and Complex

28 July 2021

Using ‘policy as code’ helps the security team to be a cloud highway builder rather than a cloud toll booth operator read more [...]

University of San Diego Health Says Personal Information Stolen in Data Breach

28 July 2021

University of San Diego Health this week revealed that personal information was accessed in a data breach involving unauthorized access to some employee email accounts. read more [...]

Iranian Spies Maintained Social Media Persona for Years Before Targeting Defense Contractor

28 July 2021

An Iranian state-sponsored threat actor tracked as TA456 maintained a social media account for several years before engaging with their intended victim, cybersecurity firm Proofpoint reports. read more [...]

IBM: Average Cost of Data Breach Exceeds $4.2 Million

28 July 2021

A global study commissioned by IBM Security shows that the average cost of a data breach exceeded $4.2 million during the coronavirus pandemic, which the company pointed out is the highest in the 17-year history of its “Cost of a Data Breach” report. read more [...]

Japanese sneaker platform SODA raises $56.4M, accquires rival Monokabu

29 July 2021

Just half a year after leading SODA’s Series B, SoftBank Ventures Asia is raising its bet on the Tokyo-based sneaker resell platform. The early-stage venture capital arm of SoftBank Group announced today it has returned to lead SODA’s Series C, which currently totals $56.4 million. Other investors include South Korean sneaker reselling platform KREAM (another […] [...]

Twitter shuttering NY, SF offices in response to new CDC guidelines

29 July 2021

Just two weeks after reopening its New York and San Francisco offices, social media giant Twitter said Wednesday that it will be closing those offices “immediately.” The decision came “after careful consideration of the CDC’s updated guidelines, and in light of current conditions,” a spokesperson said. “Twitter has made the decision to close our opened […] [...]

Zuckerberg is turning trillion-dollar Facebook into a ‘metaverse’ company, he tells investors

29 July 2021

Following the quarterly release of Facebook’s earnings numbers where the company’s CFO takes time to walk analysts through the nitty gritty of the company’s financials, CEO Mark Zuckerberg took a moment to zoom out and wax on the company’s future goals, specifically calling out his ambitions to turn Facebook into “a metaverse company.” “I wanted […] [...]

INKR draws in $3.1M to make more comics accessible to worldwide audiences

29 July 2021

INKR is a digital comics platform that crosses cultural and language divides, enabling creators to reach global audiences with its proprietary localization technology. Previously bootstrapped, the company announced today that it has raised $3.1 million in pre-Series A funding led by Monk’s Hill Ventures, with participation from manga distributor TokyoPop founder and chief executive Stu […] [...]

Personalized menopause platform Vira Health raises £1.5M from LocalGlobe, MMC Ventures

28 July 2021

A new trend is emerging in the world of startups and, to many, it couldn’t have come too soon. Why are there so few women in senior roles? Women going through menopause are commonly known to drop out of leadership roles, for instance. In the UK, menopause is responsible for about 14 million lost working […] [...]

Spotify’s Clubhouse rival, Greenroom, tops 140K installs on iOS, 100K on Android

28 July 2021

Spotify’s recently launched live audio app and Clubhouse rival, Spotify Greenroom, has a long road ahead of it if it wants to take on top social audio platforms like Clubhouse, Airtime, Spoon and others, not to mention those from top social networks, like Twitter and Facebook. To date, the new Greenroom app has only been […] [...]

Ford expects semiconductor rebound, new vehicle demand to increase 2021 profits

28 July 2021

Despite semiconductor shortages peaking during the second quarter of 2021, Ford says it delivered better-than-expected operating results by leveraging strong demand for new vehicles, like its Bronco SUV, according to its most recent earnings report. In April, Ford had expected to lose about 50% of its planned Q2 production, resulting in a profit loss for […] [...]

Ford F-150 Lightning electric pickup reservations surpass 120,000

28 July 2021

Ford and its F-150 pickup, the automaker’s best-selling vehicle, have consistently inspired brand loyalty from pickup truck owners. According to the J.D. Power 2020 U.S. Automotive Brand Loyalty Study, Ford has a 54.3% loyalty rate. Now as the automaker moves to electrify its fleet, it seems to be bringing in fresh buyers. Ford released Wednesday […] [...]

Daily Crunch: $150M Series D vaults search-as-a-service provider Algolia to $2.25B valuation

28 July 2021

Hello friends and welcome to Daily Crunch, bringing you the most important startup, tech and venture capital news in a single package. [...]

Dear Sophie: Should we sponsor international hires for H-1B transfers and green cards?

28 July 2021

"My startup is desperately recruiting, and we see a lot of engineering candidates on H-1Bs. They’re looking for H-1B transfers and green cards. What should we do?" [...]

UBEL is the New Oscorp — Android Credential Stealing Malware Active in the Wild

28 July 2021

An Android malware that was observed abusing accessibility services in the device to hijack user credentials from European banking applications has morphed into an entirely new botnet as part of a renewed campaign that began in May 2021. Italy's CERT-AGID, in late January, disclosed details about Oscorp, a mobile malware developed to attack multiple financial targets with the goal of stealing [...]

Chinese Hackers Implant PlugX Variant on Compromised MS Exchange Servers

28 July 2021

A Chinese cyberespionage group known for targeting Southeast Asia leveraged flaws in the Microsoft Exchange Server that came to light earlier this March to deploy a previously undocumented variant of a remote access trojan (RAT) on compromised systems. Attributing the intrusions to a threat actor named PKPLUG (aka Mustang Panda and HoneyMyte), Palo Alto Networks' Unit 42 threat intelligence team [...]

Hackers Posed as Aerobics Instructors for Years to Target Aerospace Employees

28 July 2021

An Iranian cyberespionage group masqueraded as an aerobics instructor on Facebook in an attempt to infect the machine of an employee of an aerospace defense contractor with malware as part of a years-long social engineering and targeted malware campaign. Enterprise security firm Proofpoint attributed the covert operation to a state-aligned threat actor it tracks as TA456, and by the wider [...]

Hackers Turning to 'Exotic' Programming Languages for Malware Development

28 July 2021

Threat actors are increasingly shifting to "exotic" programming languages such as Go, Rust, Nim, and Dlang that can better circumvent conventional security protections, evade analysis, and hamper reverse engineering efforts. "Malware authors are known for their ability to adapt and modify their skills and behaviors to take advantage of newer technologies," said Eric Milam, Vice President of [...]

Several Bugs Found in 3 Open-Source Software Used by Several Businesses

27 July 2021

Cybersecurity researchers on Tuesday disclosed nine security vulnerabilities affecting three open-source projects — EspoCRM, Pimcore, and Akaunting — that are widely used by several small to medium businesses and, if successfully exploited, could provide a pathway to more sophisticated attacks. All the security flaws in question, which impact EspoCRM v6.1.6, Pimcore Customer Data Framework [...]

New Bug Could Let Attackers Hijack Zimbra Server by Sending Malicious Email

27 July 2021

Cybersecurity researchers have discovered multiple security vulnerabilities in Zimbra email collaboration software that could be potentially exploited to compromise email accounts by sending a malicious message and even achieve a full takeover of the mail server when hosted on a cloud infrastructure. The flaws — tracked as CVE-2021-35208 and CVE-2021-35208 — were discovered and reported in [...]

Apple Releases Urgent 0-Day Bug Patch for Mac, iPhone and iPad Devices

27 July 2021

Apple on Monday rolled out an urgent security update for iOS, iPadOS, and macOS to address a zero-day flaw that it said may have been actively exploited, making it the thirteenth such vulnerability Apple has patched since the start of this year. The updates, which arrive less than a week after the company released iOS 14.7, iPadOS 14.7, and macOS Big Sur 11.5 to the public, fixes a memory [...]

BIMI: A Visual Take on Email Authentication and Security

27 July 2021

There is a saying that goes something like, "Do not judge a book by its cover." Yet, we all know we can not help but do just that - especially when it comes to online security. Logos play a significant role in whether or not we open an email and how we assess the importance of each message. Brand Indicators for Message Identification, or BIMI, aims to make it easier for us to quickly identify [...]

New PetitPotam NTLM Relay Attack Lets Hackers Take Over Windows Domains

27 July 2021

A newly uncovered security flaw in the Windows operating system can be exploited to coerce remote Windows servers, including Domain Controllers, to authenticate with a malicious destination, thereby allowing an adversary to stage an NTLM relay attack and completely take over a Windows domain. The issue, dubbed "PetitPotam," was discovered by security researcher Gilles Lionel, who shared [...]

Kaseya Gets Universal Decryptor to Help REvil Ransomware Victims

27 July 2021

Nearly three weeks after Florida-based software vendor Kaseya was hit by a widespread supply-chain ransomware attack, the company on Thursday said it obtained a universal decryptor to unlock systems and help customers recover their data. "On July 21, Kaseya obtained a decryptor for victims of the REvil ransomware attack, and we're working to remediate customers impacted by the [...]

Spotting Hackers at the Pace of XDR – From Alerts to Incidents

27 July 2021

Extended Detection and Response (XDR) technology is gaining traction within enterprises. But how can organizations handle the increased volume of alerts XDR systems produce? Samuel Jones, of cyber AI firm Stellar Cyber, discusses how embracing incident-based systems can reduce the analyst burden of XDR technology, enabling companies to spot and...Read the whole entry... »Related StoriesWhat SolarWinds Tells Us About Securing the Software Development Supply ChainThe SOC Hop Needs to be a Relic of the PastEpisode 216: Signed, Sealed and Delivered: The Future of Supply Chain Security [...]

Episode 221: Biden Unmasked APT 40. But Does It Matter?

23 July 2021

Andrew Sellers, the Chief Technology Officer at QOMPLX joins us to unpack the revelations this week about APT 40, the Chinese group that the US has accused of a string of attacks aimed at stealing sensitive trade secrets. Also: is Salesforce the next SolarWinds The post Episode 221: Biden Unmasked APT 40. But Does It Matter? appeared first on The...Read the whole entry... » Related StoriesEncore Podcast: Is Autonomous Driving Heading for a Crash?Episode 218: Denial of Sustenance Attacks -The Cyber Risk To AgricultureEpisode 217: What Fighting Pirates Teaches Us About Ransomware [...]

Encore Podcast: Is Autonomous Driving Heading for a Crash?

15 July 2021

Elon Musk is a big fan of his company’s Fully Self Driving software. But is it safe? In this encore edition of the podcast from 2018, we speak with Beau Woods of The Atlantic Council about the risks of embracing autonomous driving technology too quickly. The post Encore Podcast: Is Autonomous Driving Heading for a Crash? appeared first on The...Read the whole entry... » Related StoriesEpisode 216: Signed, Sealed and Delivered: The Future of Supply Chain SecurityEpisode 215-1: Jeremy O’Sullivan of Kytch On The Tech Serving McDonald’s Ice Cream MonopolyEpisode 214: Darkside Down: What The Colonial Attack Means For The Future… [...]

At Pride Summit: A Warning On Cyber Literacy

11 July 2021

Poor cyber literacy is at the root of many of the cybersecurity problems plaguing the U.S. economy, according to Dr. Alissa Abdullah, Deputy CSO at MasterCard. The post At Pride Summit: A Warning On Cyber Literacy appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of RansomwareEpisode 218: Denial of Sustenance Attacks -The Cyber Risk To AgricultureWhat SolarWinds Tells Us About Securing the Software Development Supply Chain [...]

Episode 220: Unpacking The Kaseya Attack And Securing Device Identities on the IoT

8 July 2021

In this episode of the podcast, sponsored by Trusted Computing Group we dig deep on this week’s ransomware attack on the Kaseya IT management software with Adam Meyers of CrowdStrike and Frank Breedijk of the Dutch Institute of Vulnerability Disclosure. Also: Tom Laffey, a product security strategist at Aruba, a Hewlett Packard Enterprise firm,...Read the whole entry... » Related StoriesEpisode 218: Denial of Sustenance Attacks -The Cyber Risk To AgricultureEpisode 215-2: Leave the Gun, Take the McFlurryEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of Ransomware [...]

Episode 219: LGBTQ+Cyber – A Pride Month Conversation On Being Queer In Infosec

30 June 2021

In this week’s episode of the podcast (#219) we speak with four cybersecurity professionals about what it means to be Queer in the industry: their various paths to the information security community, finding support among their peers and the work still left to do to make information security inclusive. All in honor of Pride Month, 2021. The post ...Read the whole entry... » Related StoriesEncore Podcast: Is Autonomous Driving Heading for a Crash?Episode 220: Unpacking The Kaseya Attack And Securing Device Identities on the IoTEpisode 216: Signed, Sealed and Delivered: The Future of Supply Chain Security [...]

Episode 218: Denial of Sustenance Attacks -The Cyber Risk To Agriculture

24 June 2021

Forget about Colonial Pipeline and JBS. A coordinated cyber attack on U.S. agriculture could, in short order, lead to foot shortages and hunger in the U.S. and abroad. And history has shown us that when food gets scarce, things get ugly - fast. How likely is such an attack? More likely than you might think, says Rob Wood of NCC Group, our guest on...Read the whole entry... » Related StoriesEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of RansomwareDeere John: Researcher Warns Ag Giant’s Site Provides a Map to Customers, EquipmentEncore Podcast: Is Autonomous Driving Heading for… [...]

Episode 217: What Fighting Pirates Teaches Us About Ransomware

17 June 2021

Criminal gangs swoop in on unsuspecting merchants to seize their goods. Behind the scenes, rival nations turn a blind eye or offer them safe harbor, in exchange for cooperation. Sound familiar? It should. The post Episode 217: What Fighting Pirates Teaches Us About Ransomware appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEpisode 218: Denial of Sustenance Attacks -The Cyber Risk To AgricultureEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of RansomwareEpisode 221: Biden Unmasked APT 40. But Does It Matter? [...]

Episode 216: Signed, Sealed and Delivered: The Future of Supply Chain Security

10 June 2021

In this episode of the podcast (#216) we talk with Brian Trzupek, Digicert’s Vice President of Product, about the growing urgency of securing software supply chains, and how digital code signing can help prevent compromises like the recent hack of the firm SolarWinds. The post Episode 216: Signed, Sealed and Delivered: The Future of Supply Chain...Read the whole entry... » Related StoriesWhat SolarWinds Tells Us About Securing the Software Development Supply ChainEncore Podcast: Is Autonomous Driving Heading for a Crash?Episode 214: Darkside Down: What The Colonial Attack Means For The Future of Ransomware [...]

What SolarWinds Tells Us About Securing the Software Development Supply Chain

7 June 2021

The recent SolarWinds attack highlights an Achilles heel for enterprises: software updates for critical enterprise applications. Digital signing of code is one solution, but organizations need to modernize their code signing processes to prioritize security and integrity and align with DevOps best practices, writes Brian Trzupek the Senior Vice...Read the whole entry... »Related StoriesEpisode 216: Signed, Sealed and Delivered: The Future of Supply Chain SecurityWant To Prevent Another SolarWinds? Start With DevelopersEpisode 210: Moving The Goal Posts On Vendor Transparency: A Conversation With Intel’s Suzy Greenberg [...]

The best deals on MacBooks right now

29 July 2021

MacBook Air (late-2020). With multiple configurations and various models to choose from, including some equipped with Apple’s new M1 processor, finding a deal on a MacBook or Mac Mini is not all that difficult. We’ll run through discounts currently available for the latest MacBook models as well as any deals to be had on the Mac Mini. Of course, there are also frequent discounts available for older Intel-based configurations — all of which will be compatible with macOS Monterey upon its release in the fall — and we’ll also highlight those when we find them. Alternatively, purchasing refurbished is another… [...]

Netflix will mandate COVID-19 vaccinations on productions in the US

29 July 2021

Illustration by Alex Castro / The Verge Netflix will require the casts and some crew on its productions in the US to be vaccinated against COVID-19, a measure that comes as the Delta variant continues to spread across the country. Deadline first reported that the streaming giant recently notified its production teams that it would require casts and crew working in “Zone A” on US productions to be vaccinated. Deadline described this classification as including both cast members and those who are in close contact with them. According to the report, Netflix plans to make few exceptions to the new… [...]

Amazon’s older Kindles will start to lose their internet access in December

28 July 2021

Amazon’s Kindle e-readers with built-in 3G will begin to lose the ability to connect to the internet on their own in the US in December, according to an email sent to customers on Wednesday. The change is due to mobile carriers transitioning from older 2G and 3G networking technology to newer 4G and 5G networks. For older Kindles without Wi-Fi, this change could mean not connecting to the internet at all. As Good e-Reader first noted in June, newer Kindle devices with 4G support should be fine, but for older devices that shipped with support for 3G and Wi-Fi like… [...]

How Instagram can take its child safety work even further

28 July 2021

Illustration by Alex Castro / The Verge In May, I wrote here that the child safety problem on tech platforms is worse than we knew. A disturbing study from the nonprofit organization Thorn found that the majority of American children were using apps years before they are supposed to be — and fully a quarter of them said they have had sexually explicit interactions with adults. That puts the onus on platforms to do a better job in both identifying child users of their services and to protect them from the abuse they might find there. Instagram has now made… [...]

Facebook will require US office employees to be vaccinated

28 July 2021

Illustration by Alex Castro / The Verge Facebook will require its US employees to be vaccinated against COVID-19 when they return to the office, the company confirmed to The Verge on Wednesday. “As our offices reopen, we will be requiring anyone coming to work at any of our US campuses to be vaccinated,” Facebook’s vice president of people Lori Goler said in a statement. “How we implement this policy will depend on local conditions and regulations. We will have a process for those who cannot be vaccinated for medical or other reasons and will be evaluating our approach in other… [...]

The best Chromebook for 2021

28 July 2021

Photo by Monica Chin / The Verge The best Chromebook laptop or two-in-one for every Chrome OS fan Continue reading… [...]

Workers at a repair facility used by Apple compare conditions to sweatshops

28 July 2021

Illustration by Alex Castro / The Verge Workers at a Houston, Texas facility that processes repairs for Apple, Dell, and Lenovo reportedly say they are working in “sweatshop” conditions, according to a story from Insider. Workers’ toilets are reportedly unsanitary and insufficient, they say they lack air conditioning, and they claim their pay is low at CSAT Solutions, a company that acts as a repair partner for tech companies like Apple. In the report, which is worth reading in its entirety, employees also reportedly say there aren’t enough bathrooms or parking spots for the number of workers, and that they’re… [...]

Apple will require masks again in most of its US stores

28 July 2021

Apple will be requiring customers and staff at most of its more than 270 US retail stores to wear masks even if they are vaccinated, according to a new Bloomberg report, bringing back a requirement that had been removed starting in June. The change goes into effect Thursday. “After carefully reviewing the latest CDC recommendations, and analyzing the health and safety data for your local area, we are updating our guidance on face masks for your store,” Apple informed workers in a memo obtained by Bloomberg. “Starting July 29, face masks will be required in store for customers and team… [...]

How to back up your Gmail

28 July 2021

Photo illustration byJakub Porzycki/NurPhoto via Getty Images You may be switching jobs, or maybe you’ve decided to stop using a specific email account, or maybe you just want a copy of all your email just in case. Whatever your reasons, it’s not a bad idea to back up and export your Gmail and other Google accounts using Google’s Takeout feature. In fact, you can set your accounts to back up regularly, which is a good practice in general. One note: if you’re backing up a company account, you may find that your company has disabled Takeout. There are third-party apps… [...]

Facebook’s business is doing better than ever

28 July 2021

Facebook CEO Mark Zuckerberg. | Photo by Kevin Dietsch/Getty Images If you pay even the slightest attention to tech news, you’ve probably recently seen nonstop criticism of Facebook’s handling of COVID-19 misinformation, along with a barrage of negative headlines tied to a new book about the company called An Ugly Truth. These headlines generally paint the picture of a tech giant that is on the outs with users, advertisers, lawmakers, and its Silicon Valley peers. But as the world’s largest social network showed Wednesday, the reality of how its business is performing couldn’t be more opposite. Facebook said its revenue… [...]

Activision Blizzard Employees Walk Out Over Sexism Complaints

28 July 2021

“We love our jobs, but our jobs don’t love us back,” one worker told WIRED. "So we’re trying to change that.” [...]

Toyota Whiffed on EVs. Now It’s Trying to Slow Their Rise

28 July 2021

In a bid to protect its investments in hybrids and hydrogen fuel cells, the carmaker is lobbying against the transition to electric vehicles. [...]

How Nothing Designed 'Ear 1s' to Beat Apple AirPods

28 July 2021

The head of design at Nothing explains how their product could take on Apple's all-conquering wireless earbuds, at a fraction of the cost. [...]

The Best Cheap Phones for (Almost) Every Budget

28 July 2021

There’s little reason to pay top dollar for a phone these days. These are our favorite Android devices and iPhones for $200 to $500. [...]

Extreme Heat Could Also Mean Power and Water Shortages

28 July 2021

An extraordinary drought in the West, plus dry lakes and reservoirs, mean there will be less water for farms, hydroelectric energy, and home users. [...]

Let’s Keep the Vaccine Misinformation Problem in Perspective

28 July 2021

Social media is not the reason the pandemic hasn’t been conquered. [...]

Samsung's Flagship Soundbar Brings Theater Audio to Your Home

28 July 2021

The HW-Q950A is spendy, but the setup is dead simple, and it won't fail to immerse you in your favorite movies and shows. [...]

A Controversial Tool Calls Out Vulnerabilities Across the Web

27 July 2021

PunkSpider is back, and crawling hundreds of millions of sites for vulnerabilities. [...]

Power Up Anywhere With the Best Travel Adapters

27 July 2021

When going abroad, these plugs are essential to keep your gadgets charged. These are our favorites. [...]

The Shapeshifting Cam Girl Rewriting the Rules of Porn

27 July 2021

Face-morphing adult content creator Coconut Kitty is ushering in the unsettling future of the medium, one where nothing is as it seems. [...]

New macOS Threat Served from Cryptocurrency Trading Platform

Related Posts

Biden: Severe cyberattacks could escalate to ‘real shooting war’

A Controversial Tool Calls Out Vulnerabilities Across the Web

No More Ransom saves almost €1 billion in ransomware payments in 5 years