Security

Attackers use GenAI to create even harder-to-detect phishing threats

The GenAI web is evolving, and so are the cybercriminals who are using it to create more realistic and harder-to-detect phishing attacks, new research by Palo Alto's Unit 42 shows.
Read more about Attackers use GenAI to create even harder-to-detect phishing threats

How old HDDs end up on e-shops: counterfeit hard drive workshop busted in Malaysia

Malaysian authorities have raided a workshop converting used hard drives into counterfeit new ones, which are later resold on major marketplaces.
Read more about How old HDDs end up on e-shops: counterfeit hard drive workshop busted in Malaysia

Massive Intel data exposure: hacker harvests 270K employee data, gets a “thanks” for disclosure

A whitehat hacker broke into four of Intel’s internal systems and discovered that the sensitive data of 270K Intel employees’ was exposed. Then, he spent months helping the company plug the leaks, only to receive one automated thank-you note.
Read more about Massive Intel data exposure: hacker harvests 270K employee data, gets a “thanks” for disclosure

Shadow library Anna’s Archive reappears online despite attacks on its “mission”

After a period of disruption, the shadow library Anna’s Archive has resurfaced online. Its operators say they’re hardening their security and urge supporters to “keep fighting” to preserve humanity’s legacy.
Read more about Shadow library Anna’s Archive reappears online despite attacks on its “mission”

UK withdraws Apple backdoor order after US opposition

Director of National Intelligence Tulsi Gabbard said on Monday the UK had agreed to drop its mandate for iPhone maker Apple to provide a "backdoor" that would have enabled access to the protected encrypted data of American citizens.
Read more about UK withdraws Apple backdoor order after US opposition

Workday CRM platform hit by hackers, suspected link to Salesforce attackers

HR solutions company Workday reveals unknown threat actors have successfully breached its third-party CRM platform using advanced social engineering tactics, echoing a recent wave of Salesforce-related attacks.
Read more about Workday CRM platform hit by hackers, suspected link to Salesforce attackers

Jane Smorodnikova, Welltory: “health data should empower every person, not just the experts”

For years, health data has remained fragmented and hard to interpret, often leaving everyday people feeling lost in numbers and...
Read more about Jane Smorodnikova, Welltory: “health data should empower every person, not just the experts”

Alex Capecelatro, Josh.ai: “AI should make the smart home seamless, secure, and truly personal”

For many homeowners, smart home technology has long promised convenience, security, and comfort – but also brought complexity and concerns...
Read more about Alex Capecelatro, Josh.ai: “AI should make the smart home seamless, secure, and truly personal”

PayPal breach exposed nearly 16M login credentials, hackers claim

5
A dataset allegedly containing 15.8 million PayPal credentials, including login emails and plaintext passwords, was posted on a popular data leak forum. Hackers claim that the data is recent.
Read more about PayPal breach exposed nearly 16M login credentials, hackers claim

Critical flaw plagues Lenovo AI chatbot: attackers can run malicious code and steal cookies

Friendly AI chatbot Lena greets you on Lenovo’s website and is so helpful that it spills secrets and runs remote scripts on corporate machines if you ask nicely. Massive security oversight highlights the potentially devastating consequences of poor AI chatbot implementations.
Read more about Critical flaw plagues Lenovo AI chatbot: attackers can run malicious code and steal cookies

Microsoft launches investigation to see whether Israel is using Azure cloud service for mass surveillance

Microsoft has opened an investigation into allegations that Israel’s military surveillance agency has used the company’s cloud service platform Azure to facilitate the mass surveillance of Palestinians.
Read more about Microsoft launches investigation to see whether Israel is using Azure cloud service for mass surveillance

Digital behavior amplified: cyberpsychology and the environments that shape us

I remember the days when I was a teenager, sitting at my computer and eager to explore the information superhighway in the 90s with my dial-up modem. Looking back, when I hacked into systems and poked around for fun to satisfy my curiosity, I had no other motive. But the world changed, and so did my motives.
Read more about Digital behavior amplified: cyberpsychology and the environments that shape us

Cyberattacks coming to a city near you: the most vulnerable US metro areas ranked

Whether critical infrastructure, healthcare, tech, or local municipalities, a new study has ranked the most vulnerable cities across the nation when it comes to handling a cyberattack.
Read more about Cyberattacks coming to a city near you: the most vulnerable US metro areas ranked

Faux law firms exploiting crypto scam victims: FBI raises the red flags

Scam victims, who have already lost billions to crypto fraud, are suffering additional millions of dollars in losses to fictitious law firms and faux lawyers who promise to help recoup the stolen coin. The Federal Bureau of Investigation (FBI) has released a list of red flag indicators to help identify these schemes.
Read more about Faux law firms exploiting crypto scam victims: FBI raises the red flags

Hackers trying to steal your Facebook login info in new Netflix phishing campaign

Scammers posing as Netflix job recruiters are targeting social media and marketing managers in a new phishing campaign designed to co-opt those companies’ Facebook accounts. Here's what to look out for.
Read more about Hackers trying to steal your Facebook login info in new Netflix phishing campaign

Stockholm and Almaty are the third and second most surveilled cities in the world, but which is the first?

The city at the top of the list is the most surveilled city in the world, with 44 government-accessible CCTV cameras for every 1,000 residents. These networks have supercharged governments’ ability to track people in real time.
Read more about Stockholm and Almaty are the third and second most surveilled cities in the world, but which is the first?

UK government is expanding Live Facial Recognition technology

The United Kingdom’s Home Office has announced the rollout of 10 new Live Facial Recognition vans to seven forces across the country, equipping officers with cutting-edge technology to catch criminals.
Read more about UK government is expanding Live Facial Recognition technology

Critical internet flaw discovered: hackers can crash websites with ease

Researchers have discovered a new severe flaw in HTTP/2, the main protocol powering the modern internet. Hackers can launch previously unseen DDoS attacks by sending unlimited requests from every bot they control, exhausting server resources.
Read more about Critical internet flaw discovered: hackers can crash websites with ease

Dozens of DockerHub Linux images still contain a critical XZ Utils backdoor

A critical XZ Utils backdoor, shipped with multiple Linux builds last year after a supply chain compromise, still lurks on DockerHub. Dozens of public images contain the bug and plague the containers built from them.
Read more about Dozens of DockerHub Linux images still contain a critical XZ Utils backdoor

Adobe rolls out urgent security updates for 13 products

Adobe is urging Creative Cloud users to update their software after dangerous vulnerabilities were uncovered.
Read more about Adobe rolls out urgent security updates for 13 products