At the Intersection of Technology and Real Life

The Week in Ransomware – January 20th 2023 – Targeting Crypto Exchanges

Syndication Bot Bleeping Computer, Syndicated Stories

There has been quite a bit of ransomware news this week, with crypto exchanges being seized for alleged money laundering and researchers providing fascinating reports on the behavior of ransomware operators. […] Read the full article here

Latest Headlines

1
2
3
4
Error
6
7
8
9
10
11
12
13

The Unbelievable Zombie Comeback of Analog Computing

30 March 2023

Computers have been digital for half a century. Why would anyone want to resurrect the clunkers of yesteryear? [...]

When a Vintage RV Is Your Home, Repair Is a Way of Life

28 March 2023

Six years ago, I moved my family into a 50-year-old RV—not just to see America, but to test my belief that anything worth fixing can be fixed. [...]

Brandon Sanderson Is Your God

23 March 2023

He’s the biggest fantasy writer in the world. He’s also very Mormon. These things are profoundly related. [...]

How to Love Technology Again

21 March 2023

At a time when software is consuming us, we crave hardware—the material anchors of our immaterial realities. [...]

I Saw the Face of God in a TSMC Semiconductor Factory

21 March 2023

As the US boosts production of silicon chips, a WIRED journalist goes inside the mysterious Taiwanese company at the center of the global industry. [...]

Jenny Odell Can Stretch Time and So Can You

14 March 2023

A conversation with the writer and artist on her new book, collective burnout, and ways to live off the clock. [...]

On the Trail of the Fentanyl King

9 March 2023

An Iraqi translator for the US military emigrated to Texas to start a new life. He ended up becoming one of the biggest drug dealers on the dark web. [...]

This Is a Philosopher on Drugs

7 March 2023

I was at the lowest point in my life. I needed a mind-altering jolt. In the end, everything—even the meaning of “everything”—changed. [...]

The Lie Detector Was Never Very Good at Telling the Truth

2 March 2023

Taking a polygraph test is always stressful, and the results are often flawed. So why have police been using it for 100 years? [...]

The Mining Industry’s Next Frontier Is Deep, Deep Under the Sea

28 February 2023

Companies are diving to the bottom to scoop up metals essential for our EV-driven future. But how much ocean are we willing to sacrifice? [...]

Microsoft OneNote will block 120 dangerous file extensions

30 March 2023

Microsoft has shared more information on what types of malicious embedded files OneNote will soon block to defend users against ongoing phishing attacks pushing malware. [...]

Ukrainian cyberpolice busts fraud gang that stole $4.3 million

30 March 2023

Ukraine's cyberpolice has arrested members of a fraud gang that stole roughly $4,300,000 from over a thousand victims across the EU. [...]

CISA orders agencies to patch bugs exploited to drop spyware

30 March 2023

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies today to patch a set of security vulnerabilities exploited as zero-days in recent attacks to install commercial spyware on mobile devices. [...]

Realtek and Cacti flaws now actively exploited by malware botnets

30 March 2023

Multiple malware botnets actively target Cacti and Realtek vulnerabilities in campaigns detected between January and March 2023, spreading ShellBot and Moobot malware. [...]

Microsoft testing adaptive brightness on more Windows 11 devices

30 March 2023

Microsoft says the new Windows 11 preview build rolling out today will allow Insiders to test the company's adaptive brightness feature on more systems. [...]

Bing search results hijacked via misconfigured Microsoft app

30 March 2023

A misconfigured Microsoft application allowed anyone to log in and modify Bing.com search results in real-time, as well as inject XSS attacks to potentially breach the accounts of Office 365 users. [...]

New AlienFox toolkit steals credentials for 18 cloud services

30 March 2023

A new modular toolkit called 'AlienFox' allows threat actors to scan for misconfigured servers to steal authentication secrets and credentials for cloud-based email services. [...]

Hackers compromise 3CX desktop app in a supply chain attack

29 March 2023

A digitally signed and trojanized version of the 3CX Voice Over Internet Protocol (VOIP) desktop client is reportedly being used to target the company's customers in an ongoing supply chain attack. [...]

Steam will drop support for Windows 7 and 8 in January 2024

29 March 2023

Valve announced that its Steam online game platform will officially drop support for the Windows 7, Windows 8, and Windows 8.1 platforms starting January 1st, 2024. [...]

SafeMoon ‘burn’ bug abused to drain $8.9 million from liquidity pool

29 March 2023

The SafeMoon token liquidity pool lost $8.9 million after a hacker exploited a newly created 'burn' smart contract function that artificially inflated the price, allowing the actors to sell SafeMoon at a much higher price. [...]

Best Air Purifier Deals: Save on Coway, Blueair, Shark and More - CNET

30 March 2023

Get clean air in your home or office so you can breathe easy with prices starting at just $50. [...]

E3 2023 Is Canceled Again After Weeks of Speculation - CNET

30 March 2023

The video game trade show was expected to have poor attendance among major game publishers. [...]

Adobe Reveals New Firefly AI Tool to Help Illustrators Color Their Art - CNET

30 March 2023

Generative AI is completely changing the creative process. [...]

Best Foldable Phones in 2023: Samsung Galaxy Z Fold, Z Flip, Moto Razr - CNET

30 March 2023

Foldable phones might be rare, but there are some great options you can buy right now. [...]

Yes, You Might Be Buying Fake Parmesan Cheese. Here's What to Look For - CNET

30 March 2023

From cheap American knockoffs to illegal counterfeiting operations, we explore the famed Italian export so you can find the good stuff. [...]

Best Teeth-Whitening Strips for 2023 - CNET

30 March 2023

Get professional-level teeth whitening at home with these strips. [...]

Microsoft Unveils Diablo 4 Xbox Series X Bundle Available for Preorder - CNET

30 March 2023

It's a hell of a bundle. [...]

Best Portable Mini Bluetooth Speakers for 2023: Top Compact Waterproof Wireless Speakers - CNET

30 March 2023

Check out our top picks for the best small Bluetooth speakers that won't break the bank. [...]

iOS 16.5 Beta 1: What Might Be Coming to Your iPhone Soon - CNET

30 March 2023

Beta testers can try these features now. [...]

What to Know About Getting COVID Again (and Again) in 2023 - CNET

30 March 2023

When it comes to reinfection, a lot has changed since the pandemic started. Here's what the experts know about how long immunity lasts and more. [...]

Automatic Updates Deliver Malicious 3CX 'Upgrades' to Enterprises

30 March 2023

In a Solar Winds-like attack, compromised, digitally signed versions of 3CX DesktopApp are landing on user systems via the vendor's update mechanism. [...]

BEC Fraudsters Expand to Snatch Real-World Goods in Commodities Twist

30 March 2023

Business email compromise scams are moving beyond just stealing cash, with some threat actors fooling companies into sending goods and materials on credit, and then skipping out on payment. [...]

Microsoft Patches 'Dangerous' RCE Flaw in Azure Cloud Service

30 March 2023

The vulnerability would have allowed an unauthenticated attacker to execute code on a container hosted on one of the platform's nodes. [...]

Organizations Reassess Cyber Insurance as Self-Insurance Strategies Emerge

30 March 2023

Risk reassessment is shaking up the cybersecurity insurance market, leading some organizations to consider their options, including self-insurance. [...]

DataDome Closes $42M in Series C Funding to Advance the Fight Against Bot-Driven Cyberattacks and Fraud

30 March 2023

The investment will fund global commercial rollout and R&D efforts to debilitate fraudsters. [...]

Socura Launches Managed SASE (MSASE) Service

30 March 2023

SASE reduces security & connectivity costs and improves employee experience. [...]

Stop Blaming the End User for Security Risk

30 March 2023

Don't count on securing end users for system security. Instead, focus on better securing the systems — make them closed by default and build with a security-first approach. [...]

Spera Takes Aim at Identity Security Posture Management

30 March 2023

ISPM is a combination of identity attack surface management, and risk reduction, as well as identity threat prevention, detection, and response. [...]

Top Tech Talent Warns of AI's Threat to Human Existence in Open Letter

29 March 2023

Elon Musk, Steve Wozniak, and Andrew Yang are among more than 1,000 tech leaders asking for time to establish human safety parameters around AI. [...]

Trojan-Rigged Tor Browser Bundle Drops Malware

29 March 2023

Attackers are targeting cryptocurrency accounts belonging to users in Russia and more than 50 other countries. [...]

RSS Error: A feed could not be found at `http://www.infosecisland.com/rss.html`; the status code is `404` and content-type is `text/html; charset=utf-8`

The best gaming GPUs of 2023

30 March 2023

My picks for the best gaming GPUs feature frame generation, ray tracing performance, an elevated gaming experience, and superior image quality. [...]

ChatGPT's next job? Co-pilot to help better invest your money

30 March 2023

A new study found the AI chatbot can help you make more balanced investment decisions. But don't think of it as a get rich quick scheme. [...]

How to quickly search Google Calendar for past or future events

30 March 2023

If you've struggled to locate an event in your Google Calendar then this handy feature is for you. [...]

The best robot vacuums of 2023: Expert reviewed

30 March 2023

But all my best robot vacuum picks will fulfill your cleaning needs, whether it's picking up pet hair, grass blades, or kids' crumbs. [...]

The best curved monitors of 2023

30 March 2023

The best curved monitors allow you to see the entire screen for longer without eyestrain and other side effects. They can also optimize your PC gaming with fast refresh rates and exceptional image quality. [...]

Lemon8: How to create your first post on the hottest new social network

30 March 2023

The app has skyrocketed in popularity overnight. Here's how to create your profile and some tips to make your posts more visible. [...]

Ring takes away free features and puts them behind its Ring Protect subscription wall

30 March 2023

Here's what it means if you have a Ring security camera or video doorbell. [...]

Singapore bank faces regulatory action over 'unacceptable' digital service outage

30 March 2023

Hours-long disruption to DBS' online banking services is the second such incident in just over a year, notes Singapore's industry regulator, which says the bank has "fallen short" in ensuring system availability and quick recovery. [...]

Bing Chat now has ads -- and it's likely a good thing. Here's why

30 March 2023

Microsoft is including ads to help support publishers whose content is powering its chatbot. [...]

How to use ChatGPT to summarize a book, article, or research paper

30 March 2023

If you're confronted with a long document or a lot of complicated text, here's how to use ChatGPT to summarize the key points. [...]

2022 Industry Threat Recap: Finance and Insurance

30 March 2023

The finance and insurance sector proved a top target for cybersecurity threats in 2022. The IBM Security X-Force Threat Intelligence Index 2023 found this sector ranked as the second most attacked, with 18.9% of X-Force incident response cases. If, as Shakespeare tells us, past is prologue, this sector will likely remain a target in 2023. […] The post 2022 Industry Threat Recap: Finance and Insurance appeared first on Security Intelligence. [...]

X-Force Prevents Zero Day from Going Anywhere

30 March 2023

This blog was made possible through contributions from Fred Chidsey and Joseph Lozowski. The X-Force Vulnerability and Exploit Database shows that the number of zero days being released each year is on the rise, but X-Force has observed that only a few of these zero days are rapidly adopted by cyber criminals each year. While […] The post X-Force Prevents Zero Day from Going Anywhere appeared first on Security Intelligence. [...]

And Stay Out! Blocking Backdoor Break-Ins

30 March 2023

Backdoor access was the most common threat vector in 2022. According to the 2023 IBM Security X-Force Threat Intelligence Index, 21% of incidents saw the use of backdoors, outpacing perennial compromise favorite ransomware, which came in at just 17%. The good news? In 67% of backdoor attacks, defenders were able to disrupt attacker efforts and […] The post And Stay Out! Blocking Backdoor Break-Ins appeared first on Security Intelligence. [...]

Cyber Storm Predicted at the 2023 World Economic Forum

29 March 2023

According to the Global Cybersecurity Outlook 2023, 93% of cybersecurity leaders and 86% of business leaders think a far-reaching, catastrophic cyber event is at least somewhat likely in the next two years. Additionally, 43% of organizational leaders think it is likely that a cyberattack will affect their organization severely in the next two years. With cybersecurity […] The post Cyber Storm Predicted at the 2023 World Economic Forum appeared first on Security Intelligence. [...]

Remote Employees: Update Your Routers (and More WFH IT Tips)

28 March 2023

As a business owner or manager, you must ensure your employees have the right tools and resources to do their jobs well — especially with more people working from home. And IT infrastructure is one of the most important considerations regarding remote work. However, the truth is that most employees don’t think about their IT […] The post Remote Employees: Update Your Routers (and More WFH IT Tips) appeared first on Security Intelligence. [...]

The Role of Human Resources in Cybersecurity

27 March 2023

The human resources (HR) department is an integral part of an organization. They work with all departments with a wider reach than even IT. As a highly visible department, HR can support and improve an organization’s security posture through employee training. Their access to employees at the start of employment is an opportunity to lay […] The post The Role of Human Resources in Cybersecurity appeared first on Security Intelligence. [...]

New Attack Targets Online Customer Service Channels

24 March 2023

An unknown attacker group is targeting customer service agents at gambling and gaming companies with a new malware effort. Known as IceBreaker, the code is capable of stealing passwords and cookies, exfiltrating files, taking screenshots and running custom VBS scripts. While these are fairly standard functions, what sets IceBreaker apart is its infection vector. Malicious […] The post New Attack Targets Online Customer Service Channels appeared first on Security Intelligence. [...]

Cybersecurity 101: What is Attack Surface Management?

23 March 2023

There were over 4,100 publicly disclosed data breaches in 2022, exposing about 22 billion records. Criminals can use stolen data for identity theft, financial fraud or to launch ransomware attacks. While these threats loom large on the horizon, attack surface management (ASM) seeks to combat them. ASM is a cybersecurity approach that continuously monitors an […] The post Cybersecurity 101: What is Attack Surface Management? appeared first on Security Intelligence. [...]

Six Ways to Secure Your Organization on a Smaller Budget

23 March 2023

My LinkedIn feed has been filled with connections announcing they have been laid off and are looking for work. While it seems that no industry has been spared from uncertainty, my feed suggests tech has been hit the hardest. Headlines confirm my anecdotal experience. Many companies must now protect their systems from more sophisticated threats […] The post Six Ways to Secure Your Organization on a Smaller Budget appeared first on Security Intelligence. [...]

Container Drift: Where Age isn’t Just a Number

22 March 2023

Container orchestration frameworks like Kubernetes have brought about untold technological advances over the past decade. However, they have also enabled new attack vectors for bad actors to leverage. Before safely deploying an application, you must answer the following questions: How long should a container live? Does the container need to write any files during runtime? […] The post Container Drift: Where Age isn’t Just a Number appeared first on Security Intelligence. [...]

Anti-Bot Software Firm DataDome Banks $42M Financing

30 March 2023

DataDome, a New York startup selling anti-bot and anti-fraud tech, has secured $42 million in new financing to fuel expansion plans. The post Anti-Bot Software Firm DataDome Banks $42M Financing appeared first on SecurityWeek. [...]

Unpatched Security Flaws Expose Water Pump Controllers to Remote Hacker Attacks

30 March 2023

Water pumping systems made by ProPump and Controls are affected by several vulnerabilities that could allow hackers to cause significant problems. The post Unpatched Security Flaws Expose Water Pump Controllers to Remote Hacker Attacks appeared first on SecurityWeek. [...]

500k Impacted by Data Breach at Debt Buyer NCB

30 March 2023

NCB Management Services is informing roughly 500,000 individuals of a data breach impacting their personal information. The post 500k Impacted by Data Breach at Debt Buyer NCB appeared first on SecurityWeek. [...]

Chinese Cyberspies Use ‘Melofee’ Linux Malware for Stealthy Attacks

30 March 2023

The recently identified Melofee Linux implant allowed Chinese cyberespionage group Winnti to conduct stealthy, targeted attacks. The post Chinese Cyberspies Use ‘Melofee’ Linux Malware for Stealthy Attacks appeared first on SecurityWeek. [...]

Why Endpoint Resilience Matters

30 March 2023

When establishing visibility and security controls across endpoints, security professionals need to understand that each endpoint bears some or all responsibility for its own security. The post Why Endpoint Resilience Matters appeared first on SecurityWeek. [...]

Microsoft Cloud Vulnerability Led to Bing Search Hijacking, Exposure of Office 365 Data

30 March 2023

An Azure Active Directory (AAD) misconfiguration leading to Bing.com compromise earned Wiz researchers a $40,000 bug bounty reward. The post Microsoft Cloud Vulnerability Led to Bing Search Hijacking, Exposure of Office 365 Data appeared first on SecurityWeek. [...]

3CX Confirms Supply Chain Attack as Researchers Uncover Mac Component

30 March 2023

3CX confirms investigating a security breach as the cybersecurity community is sharing more information on what appears to be a sophisticated supply chain attack. The post 3CX Confirms Supply Chain Attack as Researchers Uncover Mac Component appeared first on SecurityWeek. [...]

UK Introduces Mass Surveillance With Online Safety Bill

30 March 2023

The proposed UK Online Safety Bill is the enactment of two long held government desires: the removal of harmful internet content, and visibility into end-to-end content The post UK Introduces Mass Surveillance With Online Safety Bill appeared first on SecurityWeek. [...]

Musk, Scientists Call for Halt to AI Race Sparked by ChatGPT

30 March 2023

A group computer scientists and tech experts are calling for a 6-month pause to consider the profound risks of AI to society and humanity. The post Musk, Scientists Call for Halt to AI Race Sparked by ChatGPT appeared first on SecurityWeek. [...]

Malware Hunters Spot Supply Chain Attack Hitting 3CX Desktop App

29 March 2023

CrowdStrike threat intelligence team warns about unexpected malicious activity from a legitimate, signed version of the 3CXDesktopApp. The post Malware Hunters Spot Supply Chain Attack Hitting 3CX Desktop App appeared first on SecurityWeek. [...]

Daily Crunch: Ledger locks down another $108M to double down on hardware crypto wallets

30 March 2023

Hello, friends, and welcome to Daily Crunch, bringing you the most important startup, tech and venture capital news in a single package. Daily Crunch: Ledger locks down another $108M to double down on hardware crypto wallets by Christine Hall originally published on TechCrunch [...]

Virgin Orbit burns up in uncontrolled descent

30 March 2023

Virgin Orbit is laying off around 85% of its workforce in order to further reduce expenses, after the troubled space company said it was unable to secure additional funding to keep it afloat. The news, which Virgin Orbit filed with the U.S. Securities and Exchange Commission Thursday, comes just two weeks after the company furloughed […] Virgin Orbit burns up in uncontrolled descent by Aria Alamalhodaei originally published on TechCrunch [...]

Checkout.com’s new president is bullish on US expansion, says she ‘welcomes’ comparisons to Stripe

30 March 2023

Stripe competitor Checkout.com announced last month that Céline Dufétel was appointed as its new president. She had previously served as the London-based fintech startup’s CFO and COO for about 18 months before her promotion. In her expanded role, which still includes serving as the company’s COO, Dufétel oversees all operational and go-to-market teams, including finance […] Checkout.com’s new president is bullish on US expansion, says she ‘welcomes’ comparisons to Stripe by Mary Ann Azevedo originally published on TechCrunch [...]

Pokémon GO will raise the price of remote raid passes

30 March 2023

Pokémon GO is raising the price of remote raid passes, the mobile game announced today. Players used to be able to buy one pass for 100 coins (about $1) or three passes for 250 coins (about $2.50), but the cost of these items will nearly double to 195 coins for one pass, or 525 coins […] Pokémon GO will raise the price of remote raid passes by Amanda Silberling originally published on TechCrunch [...]

Discover the Disrupt 2023 Fintech Stage

30 March 2023

TechCrunch Disrupt, the premier event for startup investors and founders, is coming back September 19-21, 2023, with an enhanced new format. This year, we’re rethinking TC Sessions, the standalone industry events series, and merging them into the big annual tech event — which will once again this year be held at the Moscone Center in […] Discover the Disrupt 2023 Fintech Stage by Mary Ann Azevedo originally published on TechCrunch [...]

Audible is testing ad-supported access to select titles for non-members

30 March 2023

Audible is testing ad-supported access to select titles for non-members, the Amazon-owned audiobook company revealed on a help page on its website. The company confirmed to TechCrunch that the test is very limited and does not apply to paid members. The news was first reported by Marketing Brew. The move indicates that the company may […] Audible is testing ad-supported access to select titles for non-members by Aisha Malik originally published on TechCrunch [...]

Crypto market cap unaffected on the week amid more US lawsuits

30 March 2023

If you thought last week was crazy with the SEC clamping down on major crypto companies like Coinbase and Tron, you should buckle up for this week’s news. Crypto market cap unaffected on the week amid more US lawsuits by Jacquelyn Melinek originally published on TechCrunch [...]

I played the anime dating sim that does your taxes for you

30 March 2023

Yes, there is an anime dating sim that does your taxes, and it actually works. Tax Heaven 3000 is a game produced by MSCHF, the venture-funded creative studio behind projects like Push Party, the Lil Nas X blood shoes, the big red Astro Boy boots and Dead Startup Toys. Basically, they just make a bunch […] I played the anime dating sim that does your taxes for you by Amanda Silberling originally published on TechCrunch [...]

Netflix’s ad-supported plan comes to Apple TV after months of delay

30 March 2023

When Netflix launched its ad-supported plan four months ago, there were a few devices the plan didn’t support — Apple TV being one of them. Starting this week, the cheaper tier is available in the Netflix tvOS app. A Reddit user that goes by websgeisti noticed the update yesterday. The user noted that Netflix’s Basic […] Netflix’s ad-supported plan comes to Apple TV after months of delay by Lauren Forristal originally published on TechCrunch [...]

Yeah, of course, YC’s winter class is oozing with AI companies

30 March 2023

While some startups are reinventing the wheel, most are looking to build nuanced use cases of AI. It would be weirder if they weren't. Yeah, of course, YC’s winter class is oozing with AI companies by Rebecca Szkutak originally published on TechCrunch [...]

Researchers Detail Severe "Super FabriXss" Vulnerability in Microsoft Azure SFX

30 March 2023

Details have emerged about a now-patched vulnerability in Azure Service Fabric Explorer (SFX) that could lead to unauthenticated remote code execution. Tracked as CVE-2023-23383 (CVSS score: 8.2), the issue has been dubbed "Super FabriXss" by Orca Security, a nod to the FabriXss flaw (CVE-2022-35829, CVSS score: 6.2) that was fixed by Microsoft in October 2022. "The Super FabriXss vulnerability [...]

Chinese RedGolf Group Targeting Windows and Linux Systems with KEYPLUG Backdoor

30 March 2023

A Chinese state-sponsored threat activity group tracked as RedGolf has been attributed to the use of a custom Windows and Linux backdoor called KEYPLUG. "RedGolf is a particularly prolific Chinese state-sponsored threat actor group that has likely been active for many years against a wide range of industries globally," Recorded Future told The Hacker News. "The group has shown the ability to [...]

New Wi-Fi Protocol Security Flaw Affecting Linux, Android and iOS Devices

30 March 2023

A group of academics from Northeastern University and KU Leuven has disclosed a fundamental design flaw in the IEEE 802.11 Wi-Fi protocol standard, impacting a wide range of devices running Linux, FreeBSD, Android, and iOS. Successful exploitation of the shortcoming could be abused to hijack TCP connections or intercept client and web traffic, researchers Domien Schepers, Aanjhan Ranganathan, [...]

Cyberstorage: Leveraging the Multi-Cloud to Combat Data Exfiltration

30 March 2023

Multi-cloud data storage, once merely a byproduct of the great cloud migration, has now become a strategy for data management. "Multi-cloud by design," and its companion the supercloud, is an ecosystem in which several cloud systems work together to provide many organizational benefits, including increased scale and overall resiliency.And now, even security teams who have long been the holdout [...]

AlienFox Malware Targets API Keys and Secrets from AWS, Google, and Microsoft Cloud Services

30 March 2023

A new "comprehensive toolset" called AlienFox is being distributed on Telegram as a way for threat actors to harvest credentials from API keys and secrets from popular cloud service providers. "The spread of AlienFox represents an unreported trend towards attacking more minimal cloud services, unsuitable for crypto mining, in order to enable and expand subsequent campaigns," SentinelOne security [...]

3CX Desktop App Supply Chain Attack Leaves Millions at Risk - Urgent Update on the Way!

30 March 2023

3CX said it's working on a software update for its desktop app after multiple cybersecurity vendors sounded the alarm on what appears to be an active supply chain attack that's using digitally signed and rigged installers of the popular voice and video conferencing software to target downstream customers. "The trojanized 3CX desktop app is the first stage in a multi-stage attack chain that pulls [...]

Spyware Vendors Caught Exploiting Zero-Day Vulnerabilities on Android and iOS Devices

29 March 2023

A number of zero-day vulnerabilities that were addressed last year were exploited by commercial spyware vendors to target Android and iOS devices, Google's Threat Analysis Group (TAG) has revealed. The two distinct campaigns were both limited and highly targeted, taking advantage of the patch gap between the release of a fix and when it was actually deployed on the targeted devices. The scale of [...]

Mélofée: Researchers Uncover New Linux Malware Linked to Chinese APT Groups

29 March 2023

An unknown Chinese state-sponsored hacking group has been linked to a novel piece of malware aimed at Linux servers. French cybersecurity firm ExaTrack, which found three samples of the previously documented malicious software that date back to early 2022, dubbed it Mélofée. One of the artifacts is designed to drop a kernel-mode rootkit that's based on an open source project referred to as [...]

How to Build a Research Lab for Reverse Engineering — 4 Ways

29 March 2023

Malware analysis is an essential part of security researcher's work. But working with malicious samples can be dangerous — it requires specialized tools to record their activity, and a secure environment to prevent unintended damage. However, manual lab setup and configuration can prove to be a laborious and time-consuming process. In this article, we'll look at 4 ways to create a reverse [...]

Smart Mobility has a Blindspot When it Comes to API Security

29 March 2023

The emergence of smart mobility services and applications has led to a sharp increase in the use of APIs in the automotive industry. However, this increased reliance on APIs has also made them one of the most common attack vectors. According to Gartner, APIs account for 90% of the web application attack surface areas. With no surprise, similar trends are emerging also in the smart mobility [...]

Episode 249: Intel Federal CTO Steve Orrin on the CHIPS Act and Supply Chain Security

23 March 2023

Paul speaks with Steve Orrin, the Federal CTO at Intel Corp about representing Intel and its technologies to Uncle Sam and the impact of the CHIPS Act a massive new federal investment in semiconductors. The post Episode 249: Intel Federal CTO Steve Orrin on the CHIPS Act and Supply Chain Security appeared first on The Security Ledger with Paul F....Read the whole entry... »Click the icon below to listen. Related StoriesForget the IoT. Meet the IoZ: our Internet of Zombie thingsEpisode 248: GitHub’s Jill Moné-Corallo on Product Security And Supply Chain ThreatsCES Overlooks New Report That Finds Auto Cyber Is A… [...]

Malicious Automation is driving API Security Breaches

6 March 2023

Removing the ability to automate against a vulnerable API is a huge step forward, as automation is a key enabler for both the exploitation and the extraction of large amounts of sensitive data. The post Malicious Automation is driving API Security Breaches appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEpisode 248: GitHub’s Jill Moné-Corallo on Product Security And Supply Chain ThreatsForget the IoT. Meet the IoZ: our Internet of Zombie things2023 Technologies to Secure Your Hybrid Workspace [...]

Spotlight: Making the Most of Cyber Threat Intelligence with Itsik Kesler of KELA

16 February 2023

In this Spotlight episode of the Security Ledger podcast, I interview Itsik Kesler, the CTO of the threat intelligence firm Kela about the evolution of threat intelligence and findings from the company’s latest State of Cybercrime Threat Intelligence report. The post Spotlight: Making the Most of Cyber Threat Intelligence with Itsik Kesler of...Read the whole entry... »Click the icon below to listen. Related StoriesIoCs vs. EoCs: What’s the difference and why should you care?Cyberattacks on Industrial Control Systems Jumped in 2022Forget the IoT. Meet the IoZ: our Internet of Zombie things [...]

Cyberattacks on Industrial Control Systems Jumped in 2022

14 February 2023

Cyberattacks on industrial control systems (ICS) jumped in 2022, with an 87% jump in ransomware attacks and a 35% increase in the number of ransomware groups targeting industrial control and operational technology (OT) systems, according to a report by Dragos Security. The post Cyberattacks on Industrial Control Systems Jumped in 2022 appeared...Read the whole entry... »Related StoriesIoCs vs. EoCs: What’s the difference and why should you care?Forget the IoT. Meet the IoZ: our Internet of Zombie thingsBeware: Images, Video Shared on Signal Hang Around [...]

Forget the IoT. Meet the IoZ: our Internet of Zombie things

5 February 2023

A school that never sleeps? Cameras that go dark? A dead company hacked back to life? Welcome to the growing Internet of Zombie devices that threatens the security of the Internet. The post Forget the IoT. Meet the IoZ: our Internet of Zombie things appeared first on The Security Ledger with Paul F. Roberts. Related StoriesCES Overlooks New Report That Finds Auto Cyber Is A Dumpster FireIoCs vs. EoCs: What’s the difference and why should you care?The Future of IoT Security Standards [...]

Beware: Images, Video Shared on Signal Hang Around

25 January 2023

A researcher is warning that photos and video files shared in Signal chats may be hanging around on devices, even when they deleted the messages in which the images were shared. The post Beware: Images, Video Shared on Signal Hang Around appeared first on The Security Ledger with Paul F. Roberts. Related StoriesForget the IoT. Meet the IoZ: our Internet of Zombie thingsCyberattacks on Industrial Control Systems Jumped in 2022IoCs vs. EoCs: What’s the difference and why should you care? [...]

T-Mobile: Leaky API Exposes Data on 37 Million

20 January 2023

U.S. Telecommunications giant T-Mobile disclosed on Thursday that hackers obtained data on 37 million customers through a vulnerable API (application program interface). The disclosure was included in an 8-K filing with the U.S. Securities and Exchange Commission. The post T-Mobile: Leaky API Exposes Data on 37 Million appeared first on The...Read the whole entry... »Related StoriesMalicious Automation is driving API Security BreachesForget the IoT. Meet the IoZ: our Internet of Zombie thingsBeware: Images, Video Shared on Signal Hang Around [...]

2023 Technologies to Secure Your Hybrid Workspace

11 January 2023

For businesses looking to invest in the creation of a safer and more productive modern office environment, here’s a rundown of the top 2023 technologies to secure your hybrid workspace. The post 2023 Technologies to Secure Your Hybrid Workspace appeared first on The Security Ledger with Paul F. Roberts. Related StoriesForget the IoT. Meet the IoZ: our Internet of Zombie thingsWhat’s the Future of Detection Teams? Five Predictions for What Lies Ahead Why digital certificates are critical to 5G security [...]

New Report Finds Auto Cyber Is A Dumpster Fire

10 January 2023

Automakers swear that the security of their connected vehicles is their top priority. So how come researchers just found dozens of software flaws that could give hackers access to millions of cars? The post New Report Finds Auto Cyber Is A Dumpster Fire appeared first on The Security Ledger with Paul F. Roberts. Related StoriesForget the IoT. Meet the IoZ: our Internet of Zombie thingsDEF CON DOOM Patrol: Deere Jailbreak Raises Questions on Security, CompetitionBeware: Images, Video Shared on Signal Hang Around [...]

IoCs vs. EoCs: What’s the difference and why should you care?

9 January 2023

Security analysts and threat hunters know the importance of IOCs – indicators of compromise. But EOCs - enablers of compromise - are just as important. The post IoCs vs. EoCs: What’s the difference and why should you care? appeared first on The Security Ledger with Paul F. Roberts. Related StoriesWhat’s the Future of Detection Teams? Five Predictions for What Lies Ahead Forget the IoT. Meet the IoZ: our Internet of Zombie thingsCyberattacks on Industrial Control Systems Jumped in 2022 [...]

E3 2023 has been canceled

30 March 2023

Image: Getty Images E3 has been canceled, according to a report from IGN. Gaming’s big summer show was set to return in person in Los Angeles for the first time since 2019, but it’s been called off after huge gaming companies like Nintendo, Microsoft, and Ubisoft all said they wouldn’t be participating in the event. E3 2023 was scheduled for June 13th through 16th with a mix of industry-focused days and days that would be open to the public. But in the lead-up to June, there had been some worrying signs that things might be rocky for E3’s revival. According… [...]

Google announces AI features in Gmail, Docs, and more to rival Microsoft

30 March 2023

Google has announced a suite of upcoming generative AI features for its various Workspace apps, including Google Docs, Gmail, Sheets, and Slides. The features include new ways to generate, summarize, and brainstorm text with AI in Google Docs (similar to how many people use OpenAI’s ChatGPT), the option to generate full emails in Gmail based on users’ brief bullet points, and the ability to produce AI imagery, audio, and video to illustrate presentations in Slides (similar to features in both Microsoft Designer, powered by OpenAI’s DALL-E, and Canva, powered by Stable Diffusion). The announcement shows Google’s eagerness to catch up… [...]

You can now use Netflix’s cheaper ads plan on your Apple TV

30 March 2023

Image: Chris Welch / The Verge Netflix’s ad-supported tier now works with Apple TV set-top boxes, the company confirmed to TechCrunch. The “Basic with Ads” tier comes at a more affordable $6.99 per month cost, but when it launched in November, people who subscribed to it couldn’t use it on their Apple TV. At the time, Netflix told 9to5Mac that the ads plan would work on Apple TV down the line, and now that support is here. If you want to watch content through the ad-supported plan, you’ll need to be on version 2.3.0 of the Netflix app for Apple… [...]

Amazon sues sellers for issuing bogus takedown requests on competitors

30 March 2023

Illustration: Alex Castro / The Verge Amazon has filed three lawsuits against groups that it claims were abusing its takedown system by filing thousands of illegitimate copyright complaints against other products in a bid to get people to buy their merchandise instead. In an announcement on Thursday, the company calls the lawsuits a “new offensive against bad actors.” According to the lawsuits (which you can read here, here, and here), the alleged bad actors didn’t just file fake complaints and then sit back and wait to see if they worked. Amazon says the parties also “created fake, disposable websites, with… [...]

Star Trek: Starfleet Academy will follow the most ambitious students in the galaxy

30 March 2023

Star Trek: Starfleet Academy. | Image: Paramount Plus A few months ago, we received the news that Star Trek: Discovery was being canceled and that season 5 would be its last one on Paramount Plus. I was worried. The official Star Trek convention was canceled at what felt like the last minute, the streaming wars are settling down, and media companies are seemingly less and less interested in investing large sums of money in new shows. I spent that day wondering if that was just the first in a string of bad news about new Star Trek. Then, today, we… [...]

The Framework Laptop 16 is trying to bring back snap-on removable batteries

30 March 2023

Turns out the Framework Laptop 16’s Expansion Bay is designed to accommodate secondary batteries, too. | Image: Framework I may have changed my mind about buying a Framework Laptop 13 this year, but I’m not done being excited about the company’s products. Heck, I’m more enthusiastic than ever — because it looks like Framework is seriously planning to let us snap a second removable battery into a laptop. One week ago today, the modular laptop company announced a 16-inch notebook that promises to let you swap out its entire butt for one that fits a discrete graphics chip, extra fans,… [...]

The Last of Us on PC gets patches to fix some performance issues

30 March 2023

Image: Naughty Dog The Last of Us Part I on PC hasn’t had a smooth launch. PC players have reported crashes, performance issues, and plenty of weird visual glitches. Now, Sony-owned developer Naughty Dog has started issuing bug fixes to try and fix some of the widespread problems and investigate other bugs that are affecting PC players. A new patch arrived on Steam and the Epic Games Store last night, which includes fixes for “several performance & hitch related issues impacting some users.” It’s not clear exactly what has been fixed, and for some players, it was only a 36MB… [...]

BuzzFeed is using AI to write SEO-bait travel guides

30 March 2023

Image: Hugo Herrera / The Verge BuzzFeed has taken its next step into AI-written content and started publishing AI-generated travel guides, as reported by Futurism. The publisher’s first AI-generated articles were ad-lib quizzes that were largely innocuous, but the travel guides appear to be a more brazen play to attract search traffic about different destinations. You can see the full list of travel articles from BuzzFeed’s “Buzzy” AI tool right here. Right now, there are 44 posts covering destinations like Morocco, Stockholm, and Cape May, New Jersey. The articles are “written with the help of Buzzy the Robot (aka our… [...]

The OverDrive library ebook app is shutting down on May 1st

30 March 2023

Image: Victoria Song / The Verge Starting on May 1st, OverDrive app users who still use it to digitally access a library’s collection will need to upgrade to Libby, a newer app from the same company that also lets you rent library ebooks for free. OverDrive’s digital platform started in 2002 and continued to operate separately even after Libby launched in 2017. OverDrive is often accessed via a library’s own OverDrive website instance, but the app effectively has the same purpose of distributing publisher books digitally for free, just like Libby. The OverDrive app was removed from the Apple App… [...]

Where to preorder Samsung’s Galaxy A54 phone

30 March 2023

Samsung’s Galaxy A54 starts at $449.99. | Image: Jon Porter / The Verge Like the looks of Samsung’s Galaxy S23 but turned off by the price? You might want to check out this preorder deal on Samsung’s new Galaxy A54 phone then. Starting at just $449.99 with 6GB of RAM and 128GB of storage, the already affordable Samsung Galaxy A54 is even cheaper when you preorder it from Samsung ahead of its April 6th release date. Right now, the company is taking up to $250 off unlocked Galaxy A54 phones in black or violet when you trade in eligible phones… [...]

Trump’s Indictment Marks a Historic Reckoning

30 March 2023

A Manhattan grand jury has issued the first-ever indictment of a former US president. Buckle up for whatever happens next. [...]

12 Best Deals: Phones, Headphones, and Video Games

30 March 2023

Pixel smartphones, PlayStation titles, and even Apple's spendy AirPods Max are all on sale right now. [...]

The 13 Best Movies on HBO Max Right Now

30 March 2023

From Goodfellas to The Banshees of Inisherin, here are our favorite movies on the streaming service. [...]

Let the AI Coding Wars Begin!

30 March 2023

The way artificial intelligence can rewrite software will have huge implications for the tech industry—and everyone else, too. [...]

Specialized Turbo Tero X Review: Do Everything

30 March 2023

From the trail to your commute and everything in between, this premium ebike combines the best features around. [...]

The Effort to Harness Animal ‘Supersenses’—and Avert Disaster

30 March 2023

Technologists want to recreate the sensitivity of certain animals to the subtle signals of impending danger in order to save human lives. [...]

Your Next Landlord Could Be 100 Random People

30 March 2023

Startups are buying properties and wooing first-time real estate investors to buy shares. The model could have real repercussions for renters. [...]

Surfing Amazon’s Gadget-Strewn Sidewalk

30 March 2023

This week, we trace how Amazon was able to build a massive public wireless network, and how it will change the future of connected devices. [...]

This Blood Test Targets 50 Types of Cancer

30 March 2023

Grail’s Galleri aims to screen for many more types of tumor than was previously possible. Large-scale clinical trials are underway. [...]

Crypto Bankruptcy Markets Are Thriving After FTX's Collapse

30 March 2023

With billions locked up in collapsed exchanges and funds, investors are selling their assets for cents on the dollar. [...]

The Week in Ransomware – January 20th 2023 – Targeting Crypto Exchanges

Related Posts

Porn ID Laws: Your State or Country May Soon Require Age Verification

Trojanized Tor browsers target Russians with crypto-stealing malware

Exchange Online to block emails from vulnerable on-prem servers