For Microsoft, it's now security first and everything else second – just ask Satya
The security overhaul follows criticisms of Microsoft "inadequate" past security practices
Google says passkeys are now used by over 400 million accounts, and over a billion sign-ins
Passkeys are more popular and feature-rich than ever
Cybercrime doesn't pay: REvil hacker receives 13-year prison sentence and $16 million fine
He played a part in extorting $700 million from more than 2,500 victims
Nvidia RTX 4090 can crack complex 8-character passwords in minutes
The Nvidia A100 can do it even faster
Amazon S3 bucket with placeholder-like name leads to $1,300 in charges
Facepalm: Amazon S3 buckets, part of the Amazon Web Services infrastructure, are great for storing and managing huge amounts of data at scale, but they can also become a financial and security risk if used with poor default configurations.
Devious "Brokewell" trojan masquerades as Chrome browser update to steal your banking data
Brokewell could make you broke if it gains control of your device
Google flexes security muscle, says it stopped 2.2 million rogue apps from hitting Play Store in 2023
A couple of crypto scammers also received some legal treatment
FCC slaps top telecom companies with $200 million in fines for selling user location data
AT&T, Verizon, T-Mobile, and Sprint continued to sell data even after warnings
UK becomes first country to outlaw easily guessable default passwords on connected devices
Companies that ignore the law face a $12.5 million fine
WordPress plugin vulnerability poses severe security risk, allows for site takeovers
Millions of exploitation attempts were detected in under a month
Millions of devices still vulnerable to abandoned USB worm, continues to spread globally
Researchers suspect Chinese state-sponsored hackers are responsible
FTC distributes $5.6 million in refunds to Ring customers from privacy settlement
The commission is distributing over 117,000 PayPal payments to eligible Ring owners
US investigators link Tesla Autopilot to dozens of deaths and almost 1,000 crashes
Driver inattentiveness and misunderstanding of Autopilot systems are primary causes
Police arrest high school athletic director for deepfaking principal's voice
The move was allegedly retaliation for being let go
Nearly all Chinese keyboard apps have encryption flaws, exposing millions of users to keylogging
iOS and Huawei apps found to be safe, but others could allow passive snooping
Cybercriminals are using developing nations as test beds for ransomware attacks
Sandboxing their techniques
GPT-4 can exploit zero-day security vulnerabilities all by itself, a new study finds
A hot potato: GPT-4 stands as the newest multimodal large language model (LLM) crafted by OpenAI. This foundational model, currently accessible to customers as part of the paid ChatGPT Plus line, exhibits notable prowess in identifying security vulnerabilities without requiring external human assistance.
Hackers attempted to trick LastPass employee with cloned voice of CEO
Incident disclosed to raise awareness on deepfake-based security threats
Microsoft warns that Russia's online influence campaigns targeting US elections have picked up pace
Russia is trying to undermine US support for Ukraine and NATO
Russia-backed hacking group suspected of attack on US water system
Sandworm also created NotPetya
Bad actors are tempting T-Mobile employees with cash rewards to perform SIM swaps
Numbers said to be sourced from a T-Mobile employee directory
The DiskMantler can take apart a hard drive in as little as 8 seconds by vigorously shaking it
Once the disassembly process is complete, it spits out the usable components
Apple warns users in 92 countries of mercenary spyware attacks
No word on who might be behind the attacks
Microsoft left a server containing employee credentials exposed to the internet for a month
Admins waited 28 days before securing the server with a password