News

'Thousands' of businesses at mercy of miscreants thanks to unpatched Ray AI flaw

The Register - Wed, 27/03/2024 - 20:40
Anyscale claims issue is 'long-standing design decision' – as users are raided by intruders

Thousands of companies remain vulnerable to a remote-code-execution bug in Ray, an open-source AI framework used by Amazon, OpenAI, and others, that is being abused by miscreants in the wild to steal sensitive data and illicitly mine for cryptocurrency.…

Categories: News

Meta accused of snarfing people's Snapchat data via traffic decryption

The Register - Wed, 27/03/2024 - 15:30
I ain't afraid of no ghosts, but in this case...

To spy on rival Snapchat and get data on how the app was being used, Meta – when it was operating as Facebook – allegedly initiated a program called Project Ghostbusters, which intercepted data traffic from mobile apps. And it used that data to harm its competitors' ad business.…

Categories: News

Google reveals zero-day exploits in enterprise tech surged 64% last year

The Register - Wed, 27/03/2024 - 14:00
Crooks know where the big bucks are

Zero-day exploits targeting enterprise-specific software and appliances are now outpacing zero-day bugs overall, according to Google's threat hunting teams.…

Categories: News

Street newspaper appears to have Big Issue with Qilin ransomware gang

The Register - Wed, 27/03/2024 - 11:00
The days of cybercriminals having something of a moral compass are over

The parent company of The Big Issue, a street newspaper and social enterprise for homeless people, is wrestling with a cybersecurity incident claimed by the Qilin ransomware gang.…

Categories: News

The easy road to pervasive DLP

The Register - Wed, 27/03/2024 - 03:16
How Forcepoint Data Security Everywhere does what it says on the tin

Sponsored Post  The coronavirus pandemic appears to have changed the employment landscape forever, with estimates suggesting that up to a quarter of staff still spend some of their working week outside of the office compared to just 6 percent prior to 2020.…

Categories: News

Uncle Sam's had it up to here with 'unforgivable' SQL injection flaws

The Register - Tue, 26/03/2024 - 16:45
Software slackers urged to up their game

The US has clearly had enough of software vendors shipping products with "unforgivable" vulnerabilities, and is now urging them to launch formal code reviews to stamp out SQL injection flaws.…

Categories: News

Ransomware can mean life or death at hospitals, but DEF CON hackers have a plan

The Register - Tue, 26/03/2024 - 13:15
ARPA-H joins the challenge, adds $20M to cash rewards

Interview  As ransomware gangs target critical infrastructure – especially hospitals and other healthcare organizations – DARPA has added another government agency partner to its Artificial Intelligence Cyber Challenge (AIxCC).…

Categories: News

Pages

Subscribe to Sec Tec Limited aggregator - News