Biz & IT / Informed technology
-
Webkit zero-day exploit besieges Mac and iOS users with malvertising redirects
Flaw rendered ad-sandboxing protections "entirely useless," researchers say.
-
Councilman “mind-boggled” by Baltimore City IT department ineptitude
City IT lost data for audit because it was all kept on staff workstations.
-
German police seize “bulletproof” hosting data center in former NATO bunker
Data center in former military complex hosted drug, child porn sites.
-
Developer of Checkm8 explains why iDevice jailbreak exploit is a game changer
Unpatchable vulnerability is a game-changer that even Apple will be unable to stop.
-
Feds say Boeing 737 needs to be better designed for humans
NTSB review suggests pilots may have been overwhelmed by multiple alerts and warnings.
-
Nonprofit fights TV networks in court to keep free TV service alive
Locast says ABC, CBS, Fox, and NBC limit reach of broadcasts to boost profits.
-
Unpatchable bug in millions of iOS devices exploited, developer claims
"Checkm8" exploit works on devices from iPhone 4s to iPhone X, developer claims.
-
DoorDash hack spills loads of data for 4.9 million people
Intruders got access in May. DoorDash only found out earlier this month.
-
Vimeo collected detailed facial scans without consent, lawsuit alleges
Service Vimeo acquired in April allegedly collects facial data in violation of Illinois law.
-
AT&T vows to keep DirecTV despite losing millions of subscribers
AT&T tries to quiet concerns about DirecTV after talks about divestiture.
-
Google Play apps laden with ad malware were downloaded by millions of users
Remote configuration files allowed malware to slide past Google security checks.
-
No, it wasn’t a virus; it was Chrome that stopped Macs from booting
Google pulls Chrome update that kept some Macs from booting.
Paul Sutter walks us through the future of climate change—and things aren’t great
This episode of Edge of Knowledge focuses on our rapidly transforming world.
-
High-severity vulnerability in vBulletin is being actively exploited
Devs push a fix for the flaw, but hackers are still hitting unpatched sites.
-
Fake veteran hiring site downloads spyware instead of jobs
Lookalike domain to legitimate site offers a free desktop app. But it's a trap.
-
Magecart skimmers seen targeting routers for customer Wi-Fi networks
Web-skimming malware makers appear to be testing attacks against layer 7 routers.
-
Inside the campaign that tried to compromise Tibetans’ iOS and Android phones
Remember the 2-year campaign targeting iPhones? Here's the rest of the tale.
-
Russian national confesses to biggest bank hack in US history
In all, defendant stole more than 100 million records, prosecutors say.
-
IE zero-day under active attack gets emergency patch
Denial-of-service flaw in Microsoft Defender also gets unscheduled fix.
-
Busy North Korean hackers have new malware to target ATMs
Lazarus, once considered a ragtag group of hackers, is now among the world's most active.
-
Coder deletes open source add-on for Chef in protest over ICE contract
CEO said multiple Chef customers affected; now Chef won't renew contract.
-
Yahoo data-breach settlement: You’ll get $100, if you’re lucky
Yahoo settlement website goes live, warns that you might not get full amount.
-
Defense media tweet threatening Area 51 “raiders” pulled, DOD apologizes
Defense media outlet joked about B-2 Spirit being "last thing millennials will see" in Area 51 raid.
-
Facebook suspends tens of thousands of apps in ongoing privacy investigation
Apps improperly obtained user data, installed malware, and committed other offenses.
-
Medicine show: Crown Sterling demos 256-bit RSA key-cracking at private event
Demo of crypto-cracking algorithm fails to convince experts.
-
iOS 13 ships with known lockscreen bypass flaw that exposes contacts
Vulnerability was demonstrated one week ago, when iOS 13 was still in beta.
-
Payment card thieves hack Click2Gov bill paying portals in 8 cities
New wave of attacks comes after previous Click2Gov hack compromised 300k payment cards.
-
World’s most destructive botnet returns with stolen passwords and email in tow
Noticing an uptick in spam from people you know? You can probably blame Emotet.
-
In India, you don’t need a Google phone to have a Google Assistant
A new toll-free Google Assistant service in India can be accessed from any phone.
-
Iowa officials claim confusion over scope led to arrest of pen-testers
Rules of engagement covered courthouse and authorized lock picking.
-
Harnessing machine learning to make managing your storage less of a chore
Storage management largely revolves around pattern recognition—and AI can help.
-
AT&T considers getting rid of DirecTV as TV business tanks, WSJ reports
AT&T reportedly considers spinoff of DirecTV or combination with Dish.
-
More evidence points to Iranian cruise missiles, drones in attack on Saudi oilfield
Cruise missile parts, UAV wreckage indicate attack was at least backed by Iran.
-
Advanced hackers are infecting IT providers in hopes of hitting their customers
Previously undocumented Tortoiseshell is skilled but by no means perfect.
-
Los Angeles partnership launches platform to help people catch phishes
Nonprofit LA Cyber Lab launches app to help small businesses spot phishing, malware.
-
Protocol found in webcams and DVRs is fueling a new round of big DDoSes
WSD is supposed to be confined to local networks. It's not, and researchers are concerned.
-
Millions of Americans’ medical images and data are available on the Internet
Anyone can take a peek.