We trust so much in our organizations — systems, partners, and vendors — for deploying software, monitoring network performance, patching (both systems and software), procuring software/hardware, and performing so many other tasks. A recent ransomware attack used one …
Adversaries continue to abuse trust in the supply chain Read More »
The DHS’s Transportation Security Administration (TSA) has unveiled a new security directive forcing owners and operators of important pipelines to put more stringent cybersecurity protections in place. This is the organization’s second security directive and …
People all around the world deserve the right to have a private conversation. Communication privacy is a human right, a civil liberty and one of the centerpieces of a free society. And while we all …
DuckDuckGo is rolling out an email privacy feature that strips incoming messages of trackers that can help profile you for better profiling and ad targeting. Users of the service get a free “@duck.com” email address …
DuckDuckGo’s new email privacy service forwards tracker-free messages Read More »
Unprivileged attackers can gain root privileges by exploiting a local privilege escalation (LPE) vulnerability in default configurations of the Linux Kernel’s filesystem layer on vulnerable devices. As discovered by Qualys researchers, the LPE security flaw …
New Linux kernel bug lets you get root on most modern distros Read More »
Cybersecurity researchers on Tuesday lifted the lid on a previously undocumented malware strain dubbed “MosaicLoader” that singles out individuals searching for cracked software as part of a global campaign. The attackers behind MosaicLoader created a …
This New Malware Hides Itself Among Windows Defender Exclusions to Evade Detection Read More »
Details have emerged about a high severity security vulnerability affecting a software driver used in HP, Xerox, and Samsung printers that has remained undetected since 2005. Tracked as CVE-2021-3438 (CVSS score: 8.8), the issue concerns …
16-Year-Old Security Bug Affects Millions of HP, Samsung, Xerox Printers Read More »
The UK government is launching proposals to boost the legal status of digital identities, something it claims will ensure they are trusted as much as physical documents such as passports. The blueprint suggests the technology …
Verified: UK.gov launching plans for yet another digital identity scheme Read More »
Publicly owned rail operator Northern Trains has an excuse somewhat more technical than “leaves on the line” for its latest service disruption: a ransomware attack that has left its self-service ticketing booths out for the …
Northern Train’s ticketing system out to lunch as ransomware attack shuts down servers Read More »
An apparent ransomware attack has resulted in hundreds of self-service ticket machines across the network being taken offline across the north of England. Customers who need to use the Northern rail company, which serves towns …
Hundreds of touchscreen ticket machines are offline after a ransomware attack Read More »
Google Cloud on Tuesday is introducing a range of new security products, for both its private and public sector customers, as they look to respond to the quickly-evolving threat landscape. The new public sector tools …
Google Cloud rolls out new security tools as threat landscape heats up Read More »
Over 60% of Android apps contain security vulnerabilities, with the average number of bugs per app totaling a whopping 39 vulnerabilities. These figures are based on data presented by Atlas VPN, and data based on …
The Android apps on your phone each have, on average, 39 security vulnerabilities Read More »