Информация опасносте. Страница 4

Reddit hackers threaten to leak data stolen in February breach

The BlackCat (ALPHV) ransomware gang is behind a February cyberattack on Reddit, where the threat actors claim to have stolen 80GB of data from the company.

Man locked out of smart home for a week after he was accused of being racist

‘Unexpected and unwarranted’ exile began after Amazon driver misheard a response from a smart doorbell

MOVEit Cyber Attack: Personal Data Of Millions Stolen From Oregon, Louisiana, U.S. Agency

A cyberattack that targeted a widely used file sharing software hit the Department of Energy and other federal agencies, as well as stealing the personal information of millions of people from two state departments of transportation.

MOVEit hack: BBC, BA and Boots among cyber attack victims

Staff at multiple organisations are warned of a payroll data breach after an IT supplier is hacked.

Can you trust ChatGPT’s package recommendations?

ChatGPT can offer coding solutions, but its tendency for hallucination presents attackers with an opportunity. Here's what we learned.

Turkish Citizens’ Personal Data Offered Online After Govt Site Hacked

In a major digital security breach, a website is offering personal data about Turkish citizens including President Recep Tayyip Erdogan that appears to have been stolen by hackers from a government services website.

Barracuda Urges Replacing — Not Patching — Its Email Security Gateways

It's not often that a zero-day vulnerability causes a network security vendor to urge customers to physically remove and decommission an entire line of affected hardware -- as opposed to just applying software updates. But experts say that is exactly…

Ricky Mondello (@[email protected])

When I say that passkeys are and will be interoperable, I’m extremely serious about it. This year: - Chrome, Firefox, and other browsers on macOS can save and use iCloud Keychain’s passkeys (they need to adopt this) - Third-party password managers can participate in the ecosystem on iOS, iPadOS, and macOS - The passkeys from those third-party managers will also be usable by all web browsers Here’s a thread with more information: https://hachyderm.io/@rmondello/110509448037547578 Please spread the word!

Operation Triangulation: iOS devices targeted with previously unknown malware

While monitoring the traffic of our own corporate Wi-Fi network, we noticed suspicious activity that originated from several iOS-based phones. Since it is impossible to inspect modern iOS devices from the inside, we created offline backups of the devices, inspected them and discovered traces of compromise.

Stable Channel Update for Desktop

The Stable and extended stable channels has been updated to 114.0.5735.106 for Mac and Linux and  114.0.5735.110  for  Windows ,  which will...

Russia's FSB says U.S. NSA penetrated thousands of Apple phones in spy plot

Russia's Federal Security Service (FSB) said on Thursday that it had uncovered a U.S. National Security Agency (NSA) plot using previously unknown malware to penetrate specially made backdoor vulnerabilities in Apple phones.

Supply Chain Risk from Gigabyte App Center Backdoor - Eclypsium | Supply Chain Security for the Modern Enterprise

Recently, the Eclypsium platform began detecting suspected backdoor-like behavior within Gigabyte systems in the wild. These detections were driven by heuristic detection methods, which play an important role in detecting new, previously-unknown supply chain threats, where legitimate third-party technology products or updates have been compromised. Our follow-up analysis discovered that firmware in Gigabyte systems is […]

Информация опасносте

Накопившихся за последние несколько дней материалов оказалось столько, что его можно группировать по категориям. Вот, например, сразу несколько материалов о камерах. 1. Прекрасная история про камеры компании Ring (принадлежит Amazon). Компания производит камеры наблюдения и рекламирует их конечным потребителям. Камеры могут быть установлены в дверные звонки или просто где-то дома, и обеспечивают трансляцию происходящего в объективе камеры на смартфоны пользователей. Алгоритмы, распознавание объектов и лиц, вплоть до в будущем уведомлений полиции о подозрительных лицах в кадре, вот это все. Правда, тут оказалось, что для распознавания компания использовала во многих случаях не алгоритмы, а сотрудников в Украине. Видео передавалось и хранилось в незашифрованном виде, а ко всем видео имелся доступ у сотрудников, которые просматривали видео и классифицировали объекты, когда AI фейлился. Более того, многие сотрудники и менеджеры в офисе в США тоже имели доступ к прямой трансляции многих пользователей камер. Говорят…