A husband's quest for justice unmasks a global smishing operation
Thousands owe their financial security to his efforts
Home security specialist ADT discloses data breach in SEC filing
Customer data including physical addresses and phone numbers was compromised
Windows update flaw allows hackers to downgrade systems to vulnerable versions
Microsoft hasn't spotted an attack in the wild yet, but it will take time to develop a mitigation
What just happened? Another day, another security flaw discovered in Microsoft Windows. The latest arrives courtesy of research presented at the Black Hat security conference, which revealed a design flaw in the Windows Update architecture that allows critical OS components to be downgraded by manipulating the update process.
Hackers exploited an ISP to launch sophisticated DNS poisoning attack against customers
It happened last year, but DNS attacks continue to be a major concern
This $500 laser hacking device zaps chips to expose firmware secrets
Laser fault injection made open source and affordable
Google Chrome is finally transitioning to Manifest V3, introducing new rules for ad blockers
Critics say the new platform is focused on benefitting advertisers
The big picture: Google claims that the new version of its Chrome extension platform will mean a safer and more efficient browser experience for users. While there are some features in Manifest V3 that will facilitate this, critics claim that the new controls are more helpful to advertisers. This has raised questions about Google's motivations, given that a significant portion of its revenue comes from advertising.
Microsoft is binding employee bonuses and promotions to security performance
Cybersecurity is now everyone's job at the company
What is the most commonly used password?
Despite all warnings against using poor passwords...
The NFL is implementing facial authentication across all stadiums (updated)
Fans are not a part of the program, they will have their tickets scanned as normal
How unscrupulous developers are sidestepping Apple's extensive App Store security review
It is a lot easier than you would think
Argentina's president wants to predict crime using AI algorithms
New AI government unit will make fight against crime more effective and... timely?
Highly sophisticated malware lurked in Google's Play Store for years, undetected
Cyber-criminals were even fixing bugs in the fake apps their malware was hiding in
Google Chrome 127 introduces application-bound encryption on Windows
Until now, Chrome has used the Data Protection API (DPAPI) to protect sensitive data on Windows. However, with Chrome 127, they are introducing app-bound encryption, similar to how the Keychain operates on macOS.
Meta agrees to pay $1.4 billion in Texas lawsuit for abusing facial recognition tech
Facepalm: Meta attempted to use Facebook as a giant surveillance service to profit from users' personal data. The company ultimately failed in the endeavor and is now facing significant financial penalties as a result, which includes a massive settlement due to the state of Texas over the next five years.
Can you manage your passwords? Survey shows many feel overwhelmed yet overconfident about it
Sharing and reusing passwords remain common practices, unfortunately
Internet disruptions across France after fiber optic cables cut in suspected sabotage
Arson attacks had targeted France's national rail network days earlier
Los Angeles thieves are using Wi-Fi jammers to defeat home security systems
Wireless home security is much easier to defeat than a wired system
Sensitive data published through GitHub can be accessed even after being deleted
The service is working as intended, the company claims
AI can see what's on your screen by reading HDMI electromagnetic radiation
Researchers say the technique is already being used in the wild
Shiver me timbers: Security researchers have demonstrated that it's possible to spy on what's visible on your screen by intercepting electromagnetic radiation from video cables with great accuracy, thanks to artificial intelligence. The team from Uruguay's University of the Republic says their AI-powered cable-tapping method is good enough that these attacks are likely already happening.
How a $36 barcode scanner sped up fixing the CrowdStrike chaos at Grant Thornton Australia
Plot twist: It could have been even faster if they used QR codes
Secure Boot rendered useless, over 200 PC models from different makers are affected
WTF?! If you thought your laptop, desktop, or server was protected by Secure Boot, think again. A new vulnerability dubbed "PKfail" has left Secure Boot wide open on hundreds of PC and devices across several major tech brands. Researchers at cybersecurity firm Binarly just dropped a bombshell report showing how a leaked cryptographic key has essentially nuked the security guarantees of Secure Boot for over 200 product models.
Microsoft is working on tighter security measures for Windows after the CrowdStrike disaster
A hot potato: While still working with CrowdStrike to bring millions of botched PCs back online, Microsoft is also thinking about the future of Windows. The platform must evolve and innovate, enhancing resilience against the next faulty update coming from a third-party company.
Spyware maker gets hacked, data reveals thousands of remotely controlled devices
The CEO didn't know anything about the breach
CrowdStrike apologizes for worldwide systems outage, offers vendors a $10 UberEats voucher
To express our gratitude, your next cup of coffee or late night snack is on us!"
How to fix the July 2024 Windows update's reboot loop
Users using BitLocker encryption should keep their recovery keys handy