Security

Biometric recognition systems aren't that safe, Europol says

Biometric technology isn’t without risks and has vulnerabilities that can be used for criminal abuse.
Read more about Biometric recognition systems aren't that safe, Europol says

Court orders Belgian ISPs to block illegal sports streams and IPTV platforms

Belgian internet service providers (ISPs) and public DNS resolver operators must block access to more than 130 pirate sports streaming domains and five illegal IPTV platforms.
Read more about Court orders Belgian ISPs to block illegal sports streams and IPTV platforms

US Treasury bank regulators' emails accessed for years in “major" hacking incident

The US Treasury’s Office of the Comptroller of the Currency (OCC) on Tuesday disclosed to Congress that hackers had access to the email accounts of top federal banking regulators and 150,000 staff emails for over a year.
Read more about US Treasury bank regulators' emails accessed for years in “major" hacking incident

Android affected by critical vulnerabilities: hackers can take control without any interaction

Google has patched severe Android vulnerabilities, some of which could allow attackers to gain control of a device without user interaction or execution privileges. Two zero-day vulnerabilities have already been exploited to unlock phones.
Read more about Android affected by critical vulnerabilities: hackers can take control without any interaction

300K vehicles and millions of trips exposed in fleet manager’s data leak

NexOpt, a vehicle tracking service provider, has leaked sensitive real-time and historic travel data.
Read more about 300K vehicles and millions of trips exposed in fleet manager’s data leak

Cannabis firm LFTD Partners buys $350K worth of USDC, loses it to hackers

LFTD Partners Inc., a publicly traded cannabis and psychedelics company, has fallen victim to digital asset theft after converting a substantial portion of its cash into stablecoin.
Read more about Cannabis firm LFTD Partners buys $350K worth of USDC, loses it to hackers

Hackers on WhatsApp can spoof executables as images or other files

WhatsApp has patched a dangerous spoofing issue that enabled attackers to send executables that appeared to receivers like images, PDFs, or other files.
Read more about Hackers on WhatsApp can spoof executables as images or other files

UMMC facing class action lawsuit for enabling cyberstalking campaign

The University of Maryland Medical Center (UMMC) is being sued by former and current employees over a security breach.
Read more about UMMC facing class action lawsuit for enabling cyberstalking campaign

Apple appealing against UK 'back door' order

Apple is appealing against a British government order to create a "back door" to its encrypted cloud storage systems, the Investigatory Powers Tribunal (IPT) confirmed on Monday.
Read more about Apple appealing against UK 'back door' order

Extremely dangerous malware spreading via YouTube: it comes with a password stealer

These RATs are not after crumbs. They're here for your passwords, crypto, and total control of your systems.
Read more about Extremely dangerous malware spreading via YouTube: it comes with a password stealer

Signalgate: did iPhone contact suggestion lead to national security chaos?

It seems that Jeffrey Goldberg, the editor of the Atlantic, may have Apple to thank for his brief inclusion in a sensitive White House Signal group chat discussing US strikes in Yemen.
Read more about Signalgate: did iPhone contact suggestion lead to national security chaos?

Kellogg discloses data breach, but it's not super cereal

WK Kellogg, the North American cereal giant, has suffered a data breach impacting an unknown number of victims.
Read more about Kellogg discloses data breach, but it's not super cereal

Port of Seattle notifies 90,000 people about data breach

The Port of Seattle has informed approximately 90,000 individuals about a data breach that happened last year.
Read more about Port of Seattle notifies 90,000 people about data breach

AI gone rogue? Unpacking Grok's provocative behaviors

The broader public is wondering what Grok's rebellious side says about both AI innovation and online conduct.
Read more about AI gone rogue? Unpacking Grok's provocative behaviors

Free VPN apps linked to Chinese military: over 70 million downloads

Millions of Americans are using free VPN apps that covertly proxy their traffic through Chinese companies, including several sanctioned firms linked to China’s military, a report by the Tech Transparency Project (TTP) reveals.
Read more about Free VPN apps linked to Chinese military: over 70 million downloads

Hackers use Booking.com scam to hijack hotels

Hotel staff who think they’re confirming a reservation might be booking themselves a front-row seat to a cyberattack instead.
Read more about Hackers use Booking.com scam to hijack hotels

Hackers abuse Tax Day lure to steal credentials and deploy malware

Thousands of scam emails are hitting inboxes in the US. Hackers are delivering malware using tax-related themes, such as the IRS flagging issues with a tax filing, detection of unusual activity in your tax filing, IRS audit, and others. Microsoft warns of at least four active malicious campaigns.
Read more about Hackers abuse Tax Day lure to steal credentials and deploy malware

DDoS attack cripples Dutch hosting company Argeweb for over a week

The Dutch web hosting company Argeweb has experienced performance issues for over a week now. In a recent update, the company says this is due to a DDoS attack.
Read more about DDoS attack cripples Dutch hosting company Argeweb for over a week

Chinese threat actor jumps on misdiagnosed RCE in Ivanti VPN appliances

A suspected Chinese advanced persistent threat (APT) group has exploited a critical flaw in Ivanti’s Connect Secure VPN appliances. The US software company had failed to properly patch and document the defect earlier.
Read more about Chinese threat actor jumps on misdiagnosed RCE in Ivanti VPN appliances

Evasive "fast flux" technique is latest national security threat, CISA warns

The US Cybersecurity and Infrastructure Security Agency (CISA) on Thursday is urging internet and cybersecurity service providers to secure their networks against the latest evasive threat technique known as “fast flux.”
Read more about Evasive "fast flux" technique is latest national security threat, CISA warns