Items tagged with security
by
Nathan Ord - Tue, Apr 09, 2024
I guess the Notepad built into Windows is fine, but it could be better. It could have more features, cleanliness, and could simply just be iterated on as an improvement. Thankfully, there is Notepad++, a free and open-source Notepad...
Read more...
by
Paul Lilly - Fri, Apr 05, 2024
Contrary to what some may think, hackers can have scruples and, in some cases, honorable intentions—it's kind of the whole idea behind white hat hacking and events like Pwn2Own. But then there are the kind who wouldn't think twice about...
Read more...
by
Alan Velasco - Tue, Apr 02, 2024
The Federal Trade Commission is warning the American people to be on guard as threat actors are making use of business and government impersonation scams to do serious damage. The agency is reporting a combined loss of over $1.1 billion in...
Read more...
by
Nathan Ord - Mon, Apr 01, 2024
Twenty years ago today, Google launched a new product that was initially thought to be an April Fools' Day prank. However, that was quite the opposite, creating Gmail, which would eventually come to have over a billion users with an...
Read more...
by
Paul Lilly - Mon, Apr 01, 2024
AT&T is in the process of alerting millions of current and former account holders of an alarming data leak that exposed sensitive details to the dark web, including social security numbers. An initial investigation suggests that the...
Read more...
by
Nathan Ord - Sun, Mar 31, 2024
Over the past few days, the security world has been abuzz with the discovery of a backdoor snuck into a compression utility called xz-utils. While this backdoor was effectively a near miss, getting caught before it became pervasive, it...
Read more...
by
Nathan Ord - Sun, Mar 24, 2024
A team of researchers recently found a side-channel vulnerability in Apple’s custom SoC architecture that does not appear patchable and allows for the theft of encryption keys.
The research team, which hails from six different...
Read more...
by
Nathan Ord - Thu, Mar 21, 2024
Most experts would suggest that humans are the weakest link in cybersecurity, which is evidenced by the pervasiveness of phishing emails and whatnot. However, it’s not just end users that can be a problem. System administrators are human...
Read more...
by
Nathan Ord - Mon, Mar 18, 2024
Over the weekend, the hero shooter game Apex Legends, made by EA and Respawn Entertainment, held a tournament that was reportedly compromised by hackers. Multiple players' systems were breached, and game cheats such as X-ray vision and aimbots were installed. How exactly this happened is...
Read more...
by
Nathan Ord - Fri, Mar 15, 2024
StopCrypt ransomware is one of the most prolific yet underreported ransomware families due to its usual target of individuals rather than high-profile businesses or larger entities. We may not see this strain of ransomware in the United...
Read more...
by
Alan Velasco - Fri, Mar 15, 2024
Google Chrome users are about to get a more secure browsing experience thanks to some updates coming to desktop and iOS. Google Safe Browsing will be getting real-time, privacy-preserving URL protection, while useful additions are coming...
Read more...
by
Nathan Ord - Thu, Mar 14, 2024
This week, researchers have reported that earlier this year, threat actors leveraged a vulnerability in Windows to deploy DarkGate malware after phishing the victim for initial access. The vulnerability tracked as CVE-2024-21412 led to...
Read more...
by
Nathan Ord - Wed, Mar 13, 2024
Over the past few months, the infamous ransomware group LockBit has faced significant turmoil, including threatening a forum administrator with murder. All while this was happening, members of the group like Mikhail Vasiliev were sitting...
Read more...
by
Nathan Ord - Tue, Mar 12, 2024
Account credentials and personal data are hot commodities online, which often going up for sale at low prices so shady characters can move thousands of accounts quickly. This is reportedly what has happened to just over 15,000 Roku...
Read more...
by
Tim Sweezy - Tue, Mar 12, 2024
A new feature in the latest beta for WhatsApp gives users more peace of mind that their messages and calls made within the app are end-to-end encrypted. The latest enhancement provides a visual confirmation that their chats are indeed...
Read more...
by
Nathan Ord - Fri, Mar 08, 2024
Researchers have shown that running a man-in-the-middle attack against a Tesla owner can potentially compromise their account, unlock their car, and ultimately allow threat actors to drive away with it. There are, of coruse, a number a caveats. Much of this hinges on some social engineering...
Read more...
by
Nathan Ord - Thu, Mar 07, 2024
The Federal Bureau of Investigation’s Internet Crime Complaint Center (IC3) is the primary interface between the public and the U.S. government, to report cybercrime and collect information about cybersecurity threats. The IC3 recently...
Read more...
by
Nathan Ord - Wed, Mar 06, 2024
Following yesterday's report on an Air National Guard member sharing classified documents around the Internet, it seems the U.S. Government cannot catch a break. A 63-year-old civilian member of the U.S. Air Force assigned to U.S...
Read more...
by
Nathan Ord - Tue, Mar 05, 2024
Facebook, Instagram, and other Meta-owned properties went down earlier today and are still suffering from the aftershocks. Reports initially started to surface suggesting that threat actors were behind this and that it was a DDoS attack...
Read more...
by
Nathan Ord - Tue, Mar 05, 2024
Early in 2023, a Department of Defense leaker was nabbed after a year of posting sensitive documents to a Minecraft Discord server. Those documents made their way to sites like 4chan and elsewhere on the internet, and included a plethora...
Read more...
by
Nathan Ord - Mon, Mar 04, 2024
The criminal underbelly of cybersecurity is a shady place, with threat actors thieving data and information wherever possible. On the seemingly competent side of the business, some folks also wish to make a quick buck off the latest hype...
Read more...
by
Nathan Ord - Mon, Mar 04, 2024
The Flipper Zero, known for its use in widespread shenaniganry, is quite the little hacking device in all actuality. This pint-size hacking device is great for cloning hotel keys, opening garages (or Tesla charging ports), adjusting TVs...
Read more...