Items tagged with security
by
Paul Lilly - Sat, May 25, 2024
Before you wrap up the week and fully settle into weekend mode—especially with this being a holiday weekend—do yourself a solid and update your Chrome browser. At the risk of sounding like a broken record, there's a zero day flaw (another...
Read more...
by
Alan Velasco - Fri, May 24, 2024
Apple released iOS 17.5.1 a few days ago to fix a problem where users were seeing old photos that were deleted show back up on their devices, causing plenty of privacy concerns among users online. Unfortunately, Apple’s only remarks for...
Read more...
by
Paul Lilly - Wed, May 22, 2024
Scammers are actively phishing for victims through a tried-and-true Paypal invoice scheme, in hopes of tricking people into thinking they've been charged for an Apple product. I know this because I received a fake invoice purporting to...
Read more...
by
Nathan Ord - Mon, May 20, 2024
Are you looking to get some laundry done on the cheap or, even better yet, free? It turns out a security flaw in a popular internet-connected laundry machine vendor could allow anyone to avoid paying the fee for washing or drying clothes...
Read more...
by
Nathan Ord - Wed, May 15, 2024
AirTags and other property tracking tools are remarkably useful for keeping tabs on your stuff wherever it goes. However, on the flip side, hidden trackers are also a concern, with criminals learning to use Apple AirTags to mark vehicles...
Read more...
by
Nathan Ord - Mon, May 13, 2024
It has been a little while since our last major data breach, with the latest being back on April Fools' with AT&T having the information of 73 million accounts appear on the dark web. However, hackers never rest so it was simply a matter...
Read more...
by
Paul Lilly - Mon, May 13, 2024
Billions of Google Chrome browser users around the globe are urged to apply the latest security update, which contains a fix for a nasty exploit with a high severity rating. Dubbed CVE-2024-4671, the security flaw is described as a "user...
Read more...
by
Nathan Ord - Tue, May 07, 2024
Artificial intelligence has been used for some rather interesting applications, such as helping people deal with losing a loved one. While this is a unique use of the technology, there is so much more that AI can be used to improve our...
Read more...
by
Nathan Ord - Sun, May 05, 2024
Earlier this month, Microsoft discovered a vulnerability pattern in Android applications that could enable overwriting files and allow remote code execution. This issue that could be leveraged by attackers has also been seen in the wild...
Read more...
by
Nathan Ord - Thu, May 02, 2024
While some might say passwords are on the way out, especially with the advent of passkeys that are regarded as a better solution. However, the extinction of the password isn’t a reality yet. Passwords are still around and they're sometimes terribly not secure, especially if you use one of the...
Read more...
by
Ryan Whitwam - Tue, Apr 30, 2024
The Google Play Store is the primary app repository for most Android users, and that makes it a tantalizing target for internet ne'er-do-wells. Google says it takes Play Store security seriously—so seriously, in fact, that it has whipped...
Read more...
by
Aaron Leong - Tue, Apr 30, 2024
A 32-old Colorado man who previously worked at the National Security Agency (NSA) has been sentenced to 262 months—close to 22 years—in prison for selling National Defense Information (NDI) to a spy from the Russian Federation. Except that...
Read more...
by
Nathan Ord - Mon, Apr 22, 2024
In the past few years, the ransomware market has heated up, leading to more payouts for threat actors and more attacks overall. However, in late 2023, with the seizure of BlackCat ALPHV by law enforcement, among other factors, the business...
Read more...
by
Nathan Ord - Fri, Apr 19, 2024
If you are a threat actor and want to mine cryptocurrency or steal some juicy information, a gamer’s PC is a good target for that sort of thing, given the hardware and software they use. Even better yet is the PC of a game cheater because...
Read more...
by
Nathan Ord - Fri, Apr 12, 2024
In the last couple of days, Apple has notified its users in 92 different countries that a spyware attack targeted them. While this is not necessarily a new type of notice, Apple has reportedly elected to change its phrasing around the...
Read more...
by
Nathan Ord - Wed, Apr 10, 2024
End-of-life hardware can be quite the problem at times, even crashing back into Earth’s atmosphere at supersonic speeds for that matter. Of course, we wouldn’t expect such travesties happening with the hardware you keep in your basement...
Read more...
by
Nathan Ord - Tue, Apr 09, 2024
I guess the Notepad built into Windows is fine, but it could be better. It could have more features, cleanliness, and could simply just be iterated on as an improvement. Thankfully, there is Notepad++, a free and open-source Notepad...
Read more...
by
Paul Lilly - Fri, Apr 05, 2024
Contrary to what some may think, hackers can have scruples and, in some cases, honorable intentions—it's kind of the whole idea behind white hat hacking and events like Pwn2Own. But then there are the kind who wouldn't think twice about...
Read more...
by
Alan Velasco - Tue, Apr 02, 2024
The Federal Trade Commission is warning the American people to be on guard as threat actors are making use of business and government impersonation scams to do serious damage. The agency is reporting a combined loss of over $1.1 billion in...
Read more...
by
Nathan Ord - Mon, Apr 01, 2024
Twenty years ago today, Google launched a new product that was initially thought to be an April Fools' Day prank. However, that was quite the opposite, creating Gmail, which would eventually come to have over a billion users with an...
Read more...
by
Paul Lilly - Mon, Apr 01, 2024
AT&T is in the process of alerting millions of current and former account holders of an alarming data leak that exposed sensitive details to the dark web, including social security numbers. An initial investigation suggests that the...
Read more...
by
Nathan Ord - Sun, Mar 31, 2024
Over the past few days, the security world has been abuzz with the discovery of a backdoor snuck into a compression utility called xz-utils. While this backdoor was effectively a near miss, getting caught before it became pervasive, it...
Read more...