Security

Hackers hunt passwords: theft explodes 800%

This year, hackers have gone from cracking codes to cashing in on stolen passwords like never before.
Read more about Hackers hunt passwords: theft explodes 800%

AI-generated code is functional, but not secure at all, researchers warn

AI coding assistants introduce too many security flaws and should be a wake-up call for the industry, security researchers from Veracode warn. More often than not, the code will be functional but insecure.
Read more about AI-generated code is functional, but not secure at all, researchers warn

UK investigates 34 porn sites over new age-verification laws

Britain's media regulator on Thursday launched investigations into the compliance of four companies, which collectively run 34 pornography sites, following the country's new age-check requirement rules coming into force.
Read more about UK investigates 34 porn sites over new age-verification laws

Users sue Tea App over data breach that exposed 72K images and endless PII

Users are suing the Tea Dating Advice app over a data breach that leaked 72,000 images and other personally identifiable information (PII).
Read more about Users sue Tea App over data breach that exposed 72K images and endless PII

Spending on cybersecurity rising sharply, expected to hit $240 billion next year

End users will fork over $213 billion on information security this year, an increase of 10.4% compared to the previous year, research and advisory firm Gartner estimates. The spending growth will accelerate even further next year.
Read more about Spending on cybersecurity rising sharply, expected to hit $240 billion next year

Lovense tried to silence me, hacker claims

An ethical hacker claims that a sex toy maker, popular among cam models, attempted to silence them over account takeover and email leaking vulnerabilities.
Read more about Lovense tried to silence me, hacker claims

Australia restricts YouTube use for children under 16

Starting in December, children in Australia under the age of 16 will no longer be allowed to create YouTube accounts. Prime Minister Anthony Albanese announced that YouTube will be among the social media platforms that must verify that account holders are at least 16 years old.
Read more about Australia restricts YouTube use for children under 16

China's cyberspace watchdog summons Nvidia over H20 chip security concerns

China's cyberspace regulator said it has asked US semiconductor maker Nvidia to explain whether its H20 artificial intelligence chips have any backdoor security risks.
Read more about China's cyberspace watchdog summons Nvidia over H20 chip security concerns

Major flaws found in Lenovo BIOS: attackers can take over systems

Lenovo has released urgent BIOS updates and warned about high-severity flaws that allow privileged local attackers to gain complete control of systems. Some updates are still pending.
Read more about Major flaws found in Lenovo BIOS: attackers can take over systems

Dollar Tree data breach exposes company data – hackers

The American discount retail giant Dollar Tree has been claimed by one of the most notorious ransomware cartels. The gang posted the company on its dark web blog, claiming to have obtained over a terabyte of data.
Read more about Dollar Tree data breach exposes company data – hackers

Cheap burgers flip to costly subscription: thousands online baited by $2 Big Macs

Over 10,000 people in Romania were offered to play a game on Instagram and Facebook, and they must have thought they had won an amazing deal: only two bucks for a hamburger, cheeseburger, Big Mac, chicken burger, four portions of fries, and four Coca-Colas at McDonald’s.
Read more about Cheap burgers flip to costly subscription: thousands online baited by $2 Big Macs

Nearly 70K exposed after hacker attack on New York check casher

RiteCheck Cashing suffered a cyberattack nearly a year ago, yet customers and employees whose payment card details were exposed were only notified this week.
Read more about Nearly 70K exposed after hacker attack on New York check casher

Used external hard drives selling as new on Amazon, data recovery firm warns

Popular UnionSine external hard drives sold as new on Amazon were actually used for up to 10 years before, a new report by Attingo Datenrettung, a German data recovery firm, has warned. They could even restore the old data.
Read more about Used external hard drives selling as new on Amazon, data recovery firm warns

The ghost of FTX Japan is still online, exposing 35,000 users

More than a year after shutting down, the crypto platform FTX Japan has been spotted leaking the personal and financial data of over 35,000 users.
Read more about The ghost of FTX Japan is still online, exposing 35,000 users

CISA warns Scattered Spider ransomware group is stepping up with more sophisticated attacks

The US cybersecurity watchdog on Tuesday releases an updated advisory for the Scattered Spider ransomware group detailing even more sophisticated social engineering techniques and new ransomware variants.
Read more about CISA warns Scattered Spider ransomware group is stepping up with more sophisticated attacks

Alleged breach of ice maker exposes employee details

Arctic Glacier, a major North American ice products and services provider, was posted on a cyber cartel’s dark web blog, which it uses to showcase its latest victims.
Read more about Alleged breach of ice maker exposes employee details

Not just the UK: age verification will soon be the new normal everywhere

Privacy and security experts are complaining, and users are flocking to VPNs. It’s safe to say that the United Kingdom’s new age verification rules are causing a furore in the country. But an expert tells Cybernews that this is likely to be the dawn of a new reality.
Read more about Not just the UK: age verification will soon be the new normal everywhere

UK cyber vigilantes generating mock IDs of local MPs to protest Online Safety Act

A cyber rebel in the UK, protesting the age verification crackdown, has launched a site that generates fake driver's licenses using local MPs' names and pictures. But be warned: do not use these or any fake IDs on Pornhub or anywhere else, as it could be considered identity theft.
Read more about UK cyber vigilantes generating mock IDs of local MPs to protest Online Safety Act

Sex toy maker Lovense leaks users’ email addresses months after disclosure

Lovense, known for its remote-operated sex toys, is vulnerable to a flaw that allows attackers to reveal users’ plaintext email addresses.
Read more about Sex toy maker Lovense leaks users’ email addresses months after disclosure

Microsoft finds a way into Mac users’ secrets, helps fix the flaw

Microsoft has detailed a macOS flaw that could be exploited to bypass the security system and extract sensitive data from protected folders, including photos, location logs, face recognition data, search history, and more.
Read more about Microsoft finds a way into Mac users’ secrets, helps fix the flaw