News

JetBrains keeps mum on 26 'security problems' fixed after Rapid7 spat

The Register - Thu, 28/03/2024 - 17:26
Vendor takes hardline approach to patch disclosure to new levels

JetBrains TeamCity users are urged to apply the latest version upgrade this week after the vendor disclosed 26 new security issues in the CI/CD web application.…

Categories: News

FTX crypto-crook Sam Bankman-Fried gets 25 years in prison

The Register - Thu, 28/03/2024 - 16:19
Could have been worse: Prosecutors wanted decades more

Fallen crypto-king Sam Bankman-Fried has been jailed for 25 years after New York federal judge Lewis Kaplan expressed disbelief at almost every argument from his legal team.…

Categories: News

Nvidia's newborn ChatRTX bot patched for security bugs

The Register - Thu, 28/03/2024 - 15:33
Flaws enable privilege escalation and remote code execution

Nvidia's AI-powered ChatRTX app launched just six week ago but already has received patches for two security vulnerabilities that enabled attack vectors, including privilege escalation and remote code execution.…

Categories: News

US critical infrastructure cyberattack reporting rules inch closer to reality

The Register - Thu, 28/03/2024 - 13:30
After all, it's only about keeping the essentials on – no rush

America's long-awaited cyber attack reporting rules for critical infrastructure operators are inching closer to implementation, after the Feds posted a notice of proposed rulemaking for the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA).…

Categories: News

Canonical cracks down on crypto cons following Snap Store scam spree

The Register - Thu, 28/03/2024 - 11:45
In happier news, Ubuntu Pro extended support now goes up to 12 years

After multiple waves of cryptocurrency credential-stealing apps were uploaded to the Snap store, Canonical is changing its policies.…

Categories: News

INC Ransom claims responsibility for attack on NHS Scotland

The Register - Thu, 28/03/2024 - 10:27
Sensitive documents dumped on leak site amid claims of 3 TB of data stolen in total

NHS Scotland says it managed to contain a ransomware group's malware to a regional branch, preventing the spread of infection across the entire institution.…

Categories: News

These 17,000 unpatched Microsoft Exchange servers are a ticking time bomb

The Register - Thu, 28/03/2024 - 07:45
One might say this is a wurst case scenario

The German Federal Office for Information Security (BIS) has issued an urgent alert about the poor state of Microsoft Exchange Server patching in the country.…

Categories: News

AI hallucinates software packages and devs download them – even if potentially poisoned with malware

The Register - Thu, 28/03/2024 - 07:01
Simply look out for libraries imagined by ML and make them real, with actual malicious code. No wait, don't do that

In-depth  Several big businesses have published source code that incorporates a software package previously hallucinated by generative AI.…

Categories: News

Execs in Japan busted for winning dev bids then outsourcing to North Koreans

The Register - Thu, 28/03/2024 - 06:30
Government issues stern warning over despot money-making scheme

Two executives were issued arrest warrants in Japan on Wednesday, reportedly for charges related to establishing a business that outsourced work to North Korean IT engineers.…

Categories: News

China encouraged armed offensive against Myanmar government to protest proliferation of online scams

The Register - Thu, 28/03/2024 - 04:28
Report claims Beijing is most displaced by junta's failure to address slave labor scam settlements

The military junta controlling Myanmar has struggled to control all of its territory thanks in part to China backing rebel forces as a way of expressing its displeasure about cyberscam centers operating from the country.…

Categories: News

Apple fans flooded with phony password reset requests

The Register - Wed, 27/03/2024 - 22:06
Beware support calls offering a fix

Apple device owners, consider yourselves warned: A targeted multi-factor authentication bombing campaign is going around with the goal of exhausting iUsers into accidentally allowing a password reset.…

Categories: News

Majority of Americans now use ad blockers

The Register - Wed, 27/03/2024 - 21:26
We're dreaming of a white list, because we're just like the ones you used to know

More than half of Americans are using ad blocking software, and among advertising, programming, and security professionals that fraction is more like two-thirds to three-quarters.…

Categories: News

'Thousands' of businesses at mercy of miscreants thanks to unpatched Ray AI flaw

The Register - Wed, 27/03/2024 - 20:40
Anyscale claims issue is 'long-standing design decision' – as users are raided by intruders

Thousands of companies remain vulnerable to a remote-code-execution bug in Ray, an open-source AI framework used by Amazon, OpenAI, and others, that is being abused by miscreants in the wild to steal sensitive data and illicitly mine for cryptocurrency.…

Categories: News

Meta accused of snarfing people's Snapchat data via traffic decryption

The Register - Wed, 27/03/2024 - 15:30
I ain't afraid of no ghosts, but in this case...

To spy on rival Snapchat and get data on how the app was being used, Meta – when it was operating as Facebook – allegedly initiated a program called Project Ghostbusters, which intercepted data traffic from mobile apps. And it used that data to harm its competitors' ad business.…

Categories: News

Google reveals zero-day exploits in enterprise tech surged 64% last year

The Register - Wed, 27/03/2024 - 14:00
Crooks know where the big bucks are

Zero-day exploits targeting enterprise-specific software and appliances are now outpacing zero-day bugs overall, according to Google's threat hunting teams.…

Categories: News

Street newspaper appears to have Big Issue with Qilin ransomware gang

The Register - Wed, 27/03/2024 - 11:00
The days of cybercriminals having something of a moral compass are over

The parent company of The Big Issue, a street newspaper and social enterprise for homeless people, is wrestling with a cybersecurity incident claimed by the Qilin ransomware gang.…

Categories: News

The easy road to pervasive DLP

The Register - Wed, 27/03/2024 - 03:16
How Forcepoint Data Security Everywhere does what it says on the tin

Sponsored Post  The coronavirus pandemic appears to have changed the employment landscape forever, with estimates suggesting that up to a quarter of staff still spend some of their working week outside of the office compared to just 6 percent prior to 2020.…

Categories: News

Uncle Sam's had it up to here with 'unforgivable' SQL injection flaws

The Register - Tue, 26/03/2024 - 16:45
Software slackers urged to up their game

The US has clearly had enough of software vendors shipping products with "unforgivable" vulnerabilities, and is now urging them to launch formal code reviews to stamp out SQL injection flaws.…

Categories: News

Ransomware can mean life or death at hospitals, but DEF CON hackers have a plan

The Register - Tue, 26/03/2024 - 13:15
ARPA-H joins the challenge, adds $20M to cash rewards

Interview  As ransomware gangs target critical infrastructure – especially hospitals and other healthcare organizations – DARPA has added another government agency partner to its Artificial Intelligence Cyber Challenge (AIxCC).…

Categories: News

FreeBSD Foundation hands out Beacon gongs for safer software

The Register - Tue, 26/03/2024 - 10:15
Multiple CHERI-related projects win money for important research that prizes safety over speed

The inaugural Beacon Awards has handed three prizes to projects working on safer software for CHERI-enabled hardware running on the CheriBSD operating system.…

Categories: News

Pages

Subscribe to Sec Tec Limited aggregator - News