lemmydev2

joined 2 years ago
sorted by: new top controversial old
3
M&S says hackers broke in through third-party contractor (www.itnews.com.au)
 

Social engineering used on outsourcer.

4
Marks & Spencer Projects $400M Loss After Cyberattack (www.darkreading.com)
 

The company expects it will continue to struggle with online disruptions until at least July, due to the attack.

13
Kids Say They're Using Photos of Trump and Markiplier to Bypass 'Gorllia Tag' Age Verification (www.404media.co)
 

Popular VR game Gorilla Tag partnered with the company k-ID to comply with age verification laws.

12
A house full of open windows: Why telecoms may never purge their networks of Salt Typhoon (cyberscoop.com)
 

Experts tell CyberScoop that the U.S. telecom system is just too technologically fragmented to gather a clear picture of threats, and too big to ever fully eject all espionage efforts. The post A house full of open windows: Why telecoms may never purge their networks of Salt Typhoon appeared first on CyberScoop.

6
Volvo will be the first to install Google’s Gemini in its cars (www.theverge.com)
 

At yesterday’s I/O conference, Google announced plans to start putting its AI chatbot, Gemini, in a variety of different places, including cars. Today, Volvo said it was shoving its way to the front of the line to be the first to receive the new tech. Volvo said it was expanding its preexisting partnership with Google […]

5
Extracting Credentials from Microsoft Deployment Toolkit Shares – Red Teaming (cybersecuritynews.com)
 

Microsoft Deployment Toolkit (MDT) shares, an often-overlooked infrastructure component, can be a goldmine of credentials for attackers. A new report published by TrustedSec highlights how red teams can easily extract domain administrator credentials from misconfigured MDT deployments, potentially leading to complete network compromise. While security professionals have long focused on System Center Configuration Manager (SCCM) […] The post Extracting Credentials from Microsoft Deployment Toolkit Shares – Red Teaming appeared first on Cyber Security News.

3
Beyond the Panic: What Quantum Safety Really Looks Like for Bitcoin (hackernoon.com)
1
Windows 11’s most important new feature is post-quantum cryptography. Here’s why. (arstechnica.com)
 

For the first time, new quantum-safe algorithms can be invoked using standard Windows APIs.

4
VanHelsing ransomware builder leaked on hacking forum (www.bleepingcomputer.com)
 

The VanHelsing ransomware-as-a-service operation published the source code for its affiliate panel, data leak blog, and Windows encryptor builder after an old developer tried to sell it on the RAMP cybercrime forum. [...]

4
Third-party breach reportedly facilitated M&S hack (www.scworld.com)
 

Marks & Spencer was reported to have had its systems compromised by the Scattered Spider ransomware gang through login credentials obtained from an earlier attack against third-party IT services and consulting provider Tata Consultancy Services, according to Cybernews.

3
Hazy Hawk gang exploits DNS misconfigs to hijack trusted domains (www.bleepingcomputer.com)
 

A threat actor named 'Hazy Hawk' has been using DNS CNAME hijacking to hijack abandoned cloud endpoints of domains belonging to trusted organizations and incorporate them in large-scale scam delivery and traffic distribution systems (TDS). [...]

8
Freshly discovered bug in OpenPGP.js undermines whole point of encrypted comms (www.theregister.com)
 

Update before that proof-of-concept comes to bite Security researchers are sounding the alarm over a fresh flaw in the JavaScript implementation of OpenPGP (OpenPGP.js) that allows both signed and encrypted messages to be spoofed.…

view more: ‹ prev next ›