Security
Biometric recognition systems aren't that safe, Europol says
Biometric technology isn’t without risks and has vulnerabilities that can be used for criminal abuse.
Read more about Biometric recognition systems aren't that safe, Europol says
Court orders Belgian ISPs to block illegal sports streams and IPTV platforms
Belgian internet service providers (ISPs) and public DNS resolver operators must block access to more than 130 pirate sports streaming domains and five illegal IPTV platforms.
Read more about Court orders Belgian ISPs to block illegal sports streams and IPTV platforms
US Treasury bank regulators' emails accessed for years in “major" hacking incident
The US Treasury’s Office of the Comptroller of the Currency (OCC) on Tuesday disclosed to Congress that hackers had access to the email accounts of top federal banking regulators and 150,000 staff emails for over a year.
Read more about US Treasury bank regulators' emails accessed for years in “major" hacking incident
Android affected by critical vulnerabilities: hackers can take control without any interaction
Google has patched severe Android vulnerabilities, some of which could allow attackers to gain control of a device without user interaction or execution privileges. Two zero-day vulnerabilities have already been exploited to unlock phones.
Read more about Android affected by critical vulnerabilities: hackers can take control without any interaction
300K vehicles and millions of trips exposed in fleet manager’s data leak
NexOpt, a vehicle tracking service provider, has leaked sensitive real-time and historic travel data.
Read more about 300K vehicles and millions of trips exposed in fleet manager’s data leak
Cannabis firm LFTD Partners buys $350K worth of USDC, loses it to hackers
LFTD Partners Inc., a publicly traded cannabis and psychedelics company, has fallen victim to digital asset theft after converting a substantial portion of its cash into stablecoin.
Read more about Cannabis firm LFTD Partners buys $350K worth of USDC, loses it to hackers
Hackers on WhatsApp can spoof executables as images or other files
WhatsApp has patched a dangerous spoofing issue that enabled attackers to send executables that appeared to receivers like images, PDFs, or other files.
Read more about Hackers on WhatsApp can spoof executables as images or other files
UMMC facing class action lawsuit for enabling cyberstalking campaign
The University of Maryland Medical Center (UMMC) is being sued by former and current employees over a security breach.
Read more about UMMC facing class action lawsuit for enabling cyberstalking campaign
Apple appealing against UK 'back door' order
Apple is appealing against a British government order to create a "back door" to its encrypted cloud storage systems, the Investigatory Powers Tribunal (IPT) confirmed on Monday.
Read more about Apple appealing against UK 'back door' order
Extremely dangerous malware spreading via YouTube: it comes with a password stealer
These RATs are not after crumbs. They're here for your passwords, crypto, and total control of your systems.
Read more about Extremely dangerous malware spreading via YouTube: it comes with a password stealer
Signalgate: did iPhone contact suggestion lead to national security chaos?
It seems that Jeffrey Goldberg, the editor of the Atlantic, may have Apple to thank for his brief inclusion in a sensitive White House Signal group chat discussing US strikes in Yemen.
Read more about Signalgate: did iPhone contact suggestion lead to national security chaos?
Kellogg discloses data breach, but it's not super cereal
WK Kellogg, the North American cereal giant, has suffered a data breach impacting an unknown number of victims.
Read more about Kellogg discloses data breach, but it's not super cereal
Port of Seattle notifies 90,000 people about data breach
The Port of Seattle has informed approximately 90,000 individuals about a data breach that happened last year.
Read more about Port of Seattle notifies 90,000 people about data breach
AI gone rogue? Unpacking Grok's provocative behaviors
The broader public is wondering what Grok's rebellious side says about both AI innovation and online conduct.
Read more about AI gone rogue? Unpacking Grok's provocative behaviors
Free VPN apps linked to Chinese military: over 70 million downloads
Millions of Americans are using free VPN apps that covertly proxy their traffic through Chinese companies, including several sanctioned firms linked to China’s military, a report by the Tech Transparency Project (TTP) reveals.
Read more about Free VPN apps linked to Chinese military: over 70 million downloads
Hackers use Booking.com scam to hijack hotels
Hotel staff who think they’re confirming a reservation might be booking themselves a front-row seat to a cyberattack instead.
Read more about Hackers use Booking.com scam to hijack hotels
Hackers abuse Tax Day lure to steal credentials and deploy malware
Thousands of scam emails are hitting inboxes in the US. Hackers are delivering malware using tax-related themes, such as the IRS flagging issues with a tax filing, detection of unusual activity in your tax filing, IRS audit, and others. Microsoft warns of at least four active malicious campaigns.
Read more about Hackers abuse Tax Day lure to steal credentials and deploy malware
DDoS attack cripples Dutch hosting company Argeweb for over a week
The Dutch web hosting company Argeweb has experienced performance issues for over a week now. In a recent update, the company says this is due to a DDoS attack.
Read more about DDoS attack cripples Dutch hosting company Argeweb for over a week
Chinese threat actor jumps on misdiagnosed RCE in Ivanti VPN appliances
A suspected Chinese advanced persistent threat (APT) group has exploited a critical flaw in Ivanti’s Connect Secure VPN appliances. The US software company had failed to properly patch and document the defect earlier.
Read more about Chinese threat actor jumps on misdiagnosed RCE in Ivanti VPN appliances
Evasive "fast flux" technique is latest national security threat, CISA warns
The US Cybersecurity and Infrastructure Security Agency (CISA) on Thursday is urging internet and cybersecurity service providers to secure their networks against the latest evasive threat technique known as “fast flux.”
Read more about Evasive "fast flux" technique is latest national security threat, CISA warns