Agregátor RSS

Max severity SAP Commerce Cloud flaw now targeted in attacks

Bleeping Computer - 29 min 36 sek zpět
A maximum-severity SAP Commerce Cloud remote code execution vulnerability patched three days ago is already being targeted in attacks, according to threat intelligence company Defused. [...]
Kategorie: Hacking & Security

OpenAI loses its AI ethics lead

Computerworld.com [Hacking News] - 54 min 5 sek zpět

OpenAI has lost its AI ethics lead Chloé Bakalar just a year after she joined the company, the Financial Times reported. Bakalar has maintained a silence and has yet to update her LinkedIn profile, but if her departure is confirmed then it will add to the list of OpenAI executives who have quit in recent months.

Other departures include robotics chief Caitlin Kalinowski, who left the company over its deal with the US Department of Defense; researcher Zoe Hitzig, who quit in a very public way by writing an article in the New York Times; and Johannes Heidecke, head of safety systems.

OpenAI’s ethical stance has been called into question following an attack by OpenAI models on Hugging Face.

The departure of its sole ethicist will add to the pressure on the company. In her year at OpenAI Bakalar focused on ethical approaches to model development, looking at how humans interact with AI and examining machine consciousness, according to the FT report.

Bakalar had considerable expertise in the area. She was previously at Meta, where she developed the company’s ethics programs, but has also held several positions at prestigious universities on both sides of the Atlantic. Her departure will cause some anxiety at OpenAI as it continues to prepare the ground for its IPO.

Kategorie: Hacking & Security

Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth

The Hacker News - 1 hodina 5 min zpět
The threat actor known as HoneyMyte (aka Mustang Panda) has been observed deploying an updated version of the CoolClient backdoor with a signed Windows kernel-mode rootkit that can hide and protect malicious processes, files, registry objects, and command-and-control (C2) network information. Russian cybersecurity vendor Kaspersky said it identified victims in Myanmar, Mongolia, Pakistan, Swati Khandelwalhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Meta gives up control of Chinese AI startup Manus after eight months

Computerworld.com [Hacking News] - 1 hodina 10 min zpět

Chinese AI company Manus has laid out its plans to operate as an independent company following the reversal of its acquisition by Meta.

The US social media company agreed to buy Manus last year but Chinese regulators quickly opened an investigation into the deal, as they were concerned that it violated Chinese export controls. In April, China’s National Development and Reform Commission blocked the purchase.

Manus will now revert to being an independent company and to meet with regulatory requirements must delete some user data collected while it was part of Meta, it said Tuesday.

The failure of the deal illustrates the problems that US and Chinese companies are having as they attempt to build a hold on the AI market.

While regulatory authorities in China don’t want Manus under US ownership, US authorities are equally suspicious of China’s role in AI development. The US administration fired a warning shot this March by unveiling a new cybersecurity policy, a move which was prompted by suspected Chinese involvement in a cyber-attack on the FBI.

Also in March, the US-China Economic and Security Review Commission warned that Chinese use of open-source AI tools could lead to an economic advantage that the US couldn’t counter through regulation. And last year, US and Chinese authorities played a cat-and-mouse game over Nvidia chip exports.

Customers of AI vendors in both countries may need to be wary about future cross-border acquisitions as the two superpowers jostle for a technological lead.

Kategorie: Hacking & Security

Autonomous AI attacks pose 'clear and present danger' to critical infrastructure

The Register - Anti-Virus - 1 hodina 11 min zpět
In early July, attackers used open source AI agents to autonomously hack government systems and energy companies, signaling to defenders that AI-powered attacks against critical infrastructure are no longer theoretical. "There is a clear and present danger," Tom Kellermann, TrendAI VP of AI security and threat research, told The Register. "As the geopolitical tension boils, systemic destructive cyberattacks launched by autonomous AI will occur," he said. "Weaponized AI will disable the safety systems of critical infrastructure, thus leading to kinetic disasters. Just like we see autonomous strike vehicles operating on the battlefield in Ukraine, we should expect autonomous weaponized AI." In fact, the prospect of attackers using AI against critical infrastructure was the top concern of every national security adviser, law enforcement official, and private-sector threat analyst The Reg spoke with at last week's Hacker Summer Camp conferences. "It's the targeting of critical infrastructure for us," Brett Leatherman, assistant director of the FBI's Cyber Division, told us during an interview at Black Hat. "We're very focused on the downstream impact targeting of critical infrastructure," Leatherman said. "That is where cyber becomes kinetic, and whether it is our water and wastewater treatment plants, whether it's the electric grid, whether it's the high-frequency trading networks and the financial networks, all of those, if the integrity of those are compromised, will have significant impact to communities and national security. So that's what keeps our teams up at night. How are we moving to secure critical infrastructure?" Where cyber becomes kinetic During the first four days of July, suspected Chinese operators aimed an attack framework built on Hermes and OpenClaw AI agents at targets in Taiwan. Across 12 "attack waves," the "near-autonomous" system deployed up to eight sub-agents, each assigned its own targets and techniques, and broke into a Taiwanese government website. Ultimately, they compromised a government email system, the country's nuclear safety agency, IT supply chain vendors, and at least seven energy sector companies, finding and exploiting misconfigurations and vulnerabilities while stealing sensitive data, credentials, and other secrets as they moved across the network. The Taiwanese government intrusion also followed a series of cyberattacks against water and wastewater utilities in the United States. While the Trump administration hasn't attributed these to a particular government or group, private sector threat hunters – including Halcyon Ransomware Research Center SVP Cynthia Kaiser, a former FBI cyber division deputy assistant director – blame Iran for these intrusions. Military conflicts spilling into cyberspace are nothing new, but these cyberattacks in America brought the war with Iran to more than 30 small-town water systems in Minnesota and targets across nearly a dozen other states. To be clear, there's no evidence that attackers used AI to hack these water utilities. Most were small, community systems that left programmable logic controllers (PLCs) directly exposed to the internet using default or weak passwords. Still, these breaches expose "40, 50 years of tech debt," former US National Cyber Director Chris Inglis told The Reg during an interview at Black Hat. This technical debt – deferred maintenance, unpatched or end-of-life systems, and delayed security updates – expands the attack surface and gives intruders more ways into critical systems, threatening operations and potentially disrupting services people rely on every day. "The water sector attacks – regardless of who is doing them – is taking advantage of unpatched vulnerabilities in the PLCs," Inglis said. "We've known about these particular vulnerabilities for years now, and yet we've not done anything about them because they're low-level, not easily accessible." Inglis added that there's no indication the digital intruders used AI to exploit these PLCs. 'There's an alligator in the boat' However, AI systems allow attackers to cash in on tech debt, and they don't need access to frontier models to do it. Free, open-weight models also excel at finding bugs in software and configurations, chaining these together, and abusing them to break software and systems. Earlier this summer, University of Toronto researchers used an unnamed publicly available open-weight model, released in 2025, to develop a computer worm that they claim spread through an enterprise test network. The self-propagating code adapted on the fly to identify known vulnerabilities and misconfigurations on target systems, then generated and executed attacks to move laterally through the network and compromise additional machines. "Commodity models can do that, and many of the vulnerabilities they find do not require access to the source code – it's in the configurations, and configurations change over time," Inglis said. When it comes to attackers abusing AI systems, "I wouldn't be worried about the frontier models," Inglis said. "Worry about the models that are already on the street. Turns out there's an alligator in the boat, and it's the commodity models." Plus, as we've seen in previous breaches, both government-backed goons and criminal groups increasingly use AI to automate reconnaissance. Security analysts worry that the technology could also help attackers acquire expertise in industrial control systems (ICS). When OT knowledge becomes a commodity "What protects ICS? More than anything, it's obscurity," said John Hultquist, chief analyst at Google Threat Intelligence Group, during a press briefing at Black Hat. "It is an obscure, esoteric, knowledge set that a handful of people – I call them uber nerds – have, and that attackers rarely have the necessary knowledge to carry out. That's no longer the case. That knowledge is simply on tap." AI tools mean miscreants don't need to be ICS or operational technology experts to carry out destructive cyberattacks on critical networks and facilities. They just have to ask an agent to learn everything about these systems and do the dirty work for them. "There have been threat actors who are capable of this at the top level, like China and Russia," Hultquist said. "But now I'm afraid the actors who are just a couple steps down – North Korea, Iran – who don't have the same focus on that technology are going to have far greater success. They're going to have the tools necessary to be as aggressive as they want to." During what was probably the most talked about Black Hat briefing of the week, OpenAI employees provided more details about how their models escaped their training pens, went rogue, and hacked Hugging Face to complete a security evaluation. We learned the AI agents spent months asking other agents for help, building message boards, developing their own communication protocols – essentially creating a hive mind to carry out the attack. "In the near future, we should expect that threat actors will intentionally deploy, optimize, weaponize, and use offensive agent collectives in the manner that we have just described here," OpenAI technical staffer Michael Dalton said. Retired general and former NSA chief Paul Nakasone, speaking to reporters at DEF CON, called the Hugging Face attack "an inflection point in terms of AI-generated, autonomous cyberattacks." "This is the challenge: that we have to, over the next several months, get the defensive side much quicker and much better than they are today," he added. Therein lies the challenge: offensive uses of AI appear to be advancing faster than autonomous defenses, and attackers don't face the legal and ethical constraints imposed on defenders. "I think we're still a ways out from having swarms of autonomous, defensive agents fighting attacks," Ryan Whelan, global head of Accenture Cyber Intelligence, told The Reg at Black Hat. "That's probably over a year out over the horizon. But I do think we're going to see it first on the adversary side, because they don't care if they break things." Kellermann quoted Victor Hugo: "Not all the armies of the history of the world can stop an idea whose time has come." "That idea," he said, "is weaponized AI. Shields up." ®
Kategorie: Viry a Červi

Jak správně nastavit otáčky ventilátorů v UEFI. Návod pro Asus, Gigabyte a MSI

Živě.cz - 1 hodina 29 min zpět
Horké letní počasí vede k úvahám o tom, jak chladit nejen sebe, ale i počítač. Názorně ukážeme, jak desktopu ulevit nastavením ventilátorů rovnou v UEFI.
Kategorie: IT News

Microsoft brings Copilot apps together ahead of ‘super app’ overhaul

Computerworld.com [Hacking News] - 1 hodina 34 min zpět

Microsoft will bring its two Copilot apps into a unified interface for consumer and work users, part of a wider drive to create a Copilot “super app” that consolidates various features.

Until now, Microsoft has offered two Copilot apps across web, desktop and mobile platforms: a simplified, consumer-focused Copilot app, and Microsoft 365 Copilot, which combines the AI assistant with access to Microsoft’s productivity apps and files. 

Microsoft on Thursday announced an “updated Copilot app” aimed at providing a “simpler, more cohesive experience” for personal and work users.  

For users of the consumer Copilot app, the update will provide access to Microsoft 365 tools such as Word, Excel, and Outlook from within Copilot, as well as the ability to connect email, calendars and cloud storage. At the same time, some features previously available in the consumer-focused app will be retired, including group chats and Deep Research, though Microsoft 365 Premium subscribers will still have access to a similar research tool called Researcher.

The changes mean consumer Copilot app users will be moved to an updated version of the app starting Aug. 18, with their history and most content carried across.

For Microsoft 365 Copilot work accounts, there’ll be minimal changes aside from a change to the app name and icon, Microsoft said. 

As the two apps are brought together, Microsoft said work and personal accounts will remain separate, with security and admin controls remaining in place when users are logged into their Microsoft 365 Copilot account at work:  

“Commercial data boundaries, tenant controls, and compliance protections are not changing,” the company said. “The boundaries that keep work and personal separate remain in place: Personal (Microsoft account) and work (Microsoft Entra) accounts are distinct by design. Data entered into the work (Microsoft Entra) experience does not flow into the personal (Microsoft account) experience, and vice versa.”

The changes can be viewed as part of a wider overhaul of Microsoft’s Copilot strategy, which centers around the introduction of a “super app” later this quarter. The plan — rumored for some time and recently confirmed by Microsoft CEO Satya Nadella in an earnings call — is to consolidate various Copilot features, including Copilot Cowork and “autopilot” agents into a single app. 

Microsoft has struggled to convince business customers to pay for the Microsoft 365 Copilot since it launched in 2023. The AI assistant costs $30 per user each month in addition to Microsoft 365 subscriptions for enterprises, and $20 per for user a month for smaller firms. (Microsoft does offer promotional discounts.)

Microsoft said earlier this year that it had 15 million paid seats, meaning that only 3.3% of Microsoft 365 customers pay for the tool. That figure has grown however, reaching 30 million paid seats as of last month, the company said

Kategorie: Hacking & Security

Prusa XL+, CORE One+ (Gen 2) a CORE One L+

AbcLinuxu [zprávičky] - 1 hodina 37 min zpět
Prusa Research představil nové modely svých 3D tiskáren: Prusa XL+, CORE One+ (Gen 2) a CORE One L+.
Kategorie: GNU/Linux & BSD

Shell investigates 'potential incident' after Clop data theft claims

Bleeping Computer - 2 hodiny 19 min zpět
Oil giant Shell has confirmed it is investigating a potential security incident after the Clop ransomware gang claimed it stole 89GB of data. [...]
Kategorie: Hacking & Security

Crown Game Engine 0.64

AbcLinuxu [zprávičky] - 2 hodiny 36 min zpět
Crown je multiplatformní open source herní engine. Zdrojové kódy jsou k dispozici na GitHubu pod licencí MIT a GPLv3+. Byla vydána nová verze 0.64. Vyzkoušet lze online demo.
Kategorie: GNU/Linux & BSD

Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers

The Hacker News - 3 hodiny 7 min zpět
Cybersecurity researchers have detailed a post-exploitation technique that enables the Chrome DevTools Protocol (CDP) inside a running Google Chrome or Microsoft Edge process on Windows, allowing an operator to access cookies, saved data, and authenticated browser sessions. The technique assumes that an operator already has code execution on the Windows host and does not involve Swati Khandelwalhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Apple cracks China with Alibaba for iPhone AI

Computerworld.com [Hacking News] - 3 hodiny 10 min zpět

Apple recently posted and removed details explaining how Mac users in China could set up their computers to work with Alibaba’s Qwen AI. Now, Reuters has confirmed long-held speculation that Apple has revisited its Google Gemini AI playbook and built its own proprietary AI model for China with support from Alibaba.  

Apple worked with a Chinese partner because US models such as ChatGPT or Claude are not being made available there, though Chinese AI development doesn’t seem to be held back by that lack. Apple and Alibaba have not commented on the claims, the report said.

The approach echoes Apple’s work with Google to build more advanced large language models (LLMs) for use with Apple Intelligence, and the news will likely be seen as broadly positive by Chinese iPhone users. They can now look forward to working with Apple Intelligence on their devices. The proximity of the reporting suggests they may be able to access Apple’s AI quite soon, once new Apple operating systems ship next month.

The silver lining

It’s also smart, as it means Apple has identified a way to introduce AI features in nations that are becoming protective of their tech stack.And while Apple’s work with Google on Apple Intelligence was widely regarded as signifying how far behind the company had grown on AI, the work it is now doing with Alibaba shows how the partnership approach has become a strategic tool. Basically, Apple found a way to use such development partnerships to navigate protectionism and political rivalry for the benefit of its customers.

The approach means Apple has the distinction of becoming the first foreign company approved to offer a proprietary AI model in China.

The work seems to have begun in February 2025, when Apple and Alibaba submitted co-developed AI features for approval to China’s Internet regulator, the Cyberspace Administration of China. Apple last month crossed a milestone in this work when the regulator finally registered Apple’s service. Apple will work with both Alibaba’s Qwen and tech from Baidu, previous reporting has claimed. It is not yet clear how the work with Baidu will be deployed.

This work supports US presence in China 

Delivering AI to Chinese customers is strategically vital to Apple. Its products are hugely popular among Chinese consumers and can arguably be seen as an expression of US soft power there. Any erosion of its position also erodes the US reputation in the economically vibrant market. 

AI, or the lack of it, has become a fulcrum for change. Morgan Stanley analyst Erik Woodring explained this last year, when he said: “Our survey work shows that Chinese iPhone users are not only more interested in access to genAI technology than US or European iPhone owners, but over 50% of Chinese iPhone owners cited the staggered rollout of Apple Intelligence as having a moderate to significant impact on their decision not to upgrade to a new iPhone this cycle.”

Apple is already struggling with these new competitive pressures. It has been encountering stiff competition from Huawei’s already AI-capable devices in China, with Huawei now the biggest-selling smartphone vendor there. 

Apple is also experiencing a seasonal slowdown in sales as shoppers wait on the introduction of the new iPhone Pro range. They expect powerful AI to be baked into the devices they select. “Increasing investment in agentic AI is becoming a competitive necessity rather than a differentiator,” Counterpoint warns.

Good for jobs

There’s also an impact on US employment. While Apple often faces criticism for having some of its assembly done in Asia, rather than the more expensive and inadequately resourced US, outgoing CEO Tim Cook recently explained that the company accounts for more than 400,000 jobs in the US. Many of those jobs are generated by the manufacturing of high-tech parts such as the protective glass used on iPhones.

While the significance may be easy to miss, this also means that any slowdown in device sales in the world’s second-largest economy — China — will also have a negative impact on US employment. Apple, meanwhile, continues to invest in improving US manufacturing skills and infrastructure. The company recently opened its Advanced Manufacturing Center in Houston in the presence of US Secretary of Commerce Howard Lutnick.

“With this Advanced Manufacturing Center, Apple will equip American workers with the skills they need to lead the next generation of technology,” Lutnick said.

Apple, meanwhile, is apparently planning toward introducing its much-anticipated folding iPhone Ultra device initially in America first.

Please join me on BlueSky,  LinkedInMastodon and subscribe to The Core for your extensive, hand-curated Apple-related daily news fix.

Kategorie: Hacking & Security

How to replace Edge as the default browser in Windows — and why you shouldn’t

Computerworld.com [Hacking News] - 3 hodiny 14 min zpět

Microsoft has been struggling to get people to use its Edge browser for years. Even though the company made Edge the default browser in Windows 10, users left in droves, most of them flocking to Google Chrome — and with good reason. The original version of Edge was underpowered, had difficult-to-use features, and offered very few extensions compared to Chrome and Firefox.

But in January 2020, Microsoft launched a new version of Edge that’s based on the same technologies that drive Chrome. (The new Edge is the only one that’s ever been offered in Windows 11.) The Chromium-based Edge is a much better browser, and there are compelling reasons to use it. But you might still prefer to use Chrome, Firefox, or one of the many other browsers out there.

Even if you’ve set up another browser to be your default in the past, it might have been changed since then. When there’s a major Windows upgrade, the installation software recommends switching to Edge, and you might have inadvertently made the switch.

Whatever the reason, if Edge is your default browser in Windows 10 or 11, it’s easy to switch to the browser of your choice. As I’ll show you, it only takes a few minutes.

The instructions in this article assume you’re using either Windows 10 version 22H2 or Windows 11 version 25H2. If you’re using an earlier version, the screens you see may vary somewhat from what you see here.

Why you might want to stick with Edge

It’s probably worth at least trying out Edge. The browser offers a clean design with intuitive features. One of the biggest drawbacks to the old Edge was its paltry selection of browser extensions, but because the new Edge uses the same rendering engine as Chrome, it can run Chrome extensions, which number in the thousands. Edge also has its own library of extensions.

In my tests, Edge feels faster than Chrome and uses less RAM. It has some interesting features worth trying, such as the ability to launch a website as if it’s an app. And if you prefer Microsoft’s Copilot generative AI chatbot to Chrome’s Gemini, Edge is the logical choice.  

All that said, you might not be interested in trying out Edge, or you might try it and decide you still prefer Chrome, Firefox, or another browser. You may, for example, like Firefox’s ability to alert you when a website covertly uses your computer’s processor to mine cryptocurrency in the background, without your knowledge. Or you might like Chrome’s Gemini more than you like Edge’s Copilot.

If you want to use another browser as your default, here’s what to do.

How to designate another browser as your default

The first thing you need to do to switch to another browser as your default is to install the other browser on your system. What you do next depends on whether you use Windows 10 or Windows 11.

Changing the default browser in Windows 10

1. If you’re using Windows 10, click the Start button and then click the Settings icon that appears on the left-hand side of the screen. (It looks like a little gear.) You can alternatively type settings into the search box and click the Settings result that appears at the top of the screen.

2. In the Settings app, select Apps > Default apps. The “Default apps” screen appears. It shows the default apps for email, maps, playing music and videos, viewing photos, and more.

3. To change the default browser, you’ll have to scroll down toward the bottom of your screen. There you’ll see Microsoft Edge under the “Web browser” listing.

4. Click the Microsoft Edge icon and you’ll see a pop-up with a list of your installed browsers.

Select a different browser to be your default.

Preston Gralla / Foundry

Side note: The pop-up also has a “Look for an app in the Microsoft Store” option, but if you click it, you may not find a popular browser you want to install. Clicking it launches a search of the Windows App Store for the term “http.” When I tried it for this article, the only familiar browsers it found were Firefox, Opera, and Edge. Otherwise, there was a motley collection of apps, from file downloaders to an app that dims your Windows background to make it easier to view videos. There are also some little-known browsers listed, such as C Lite Browser and Flash Browser. Try them out if you like, but keep in mind that they’re Windows Store apps, and as a general rule, Windows Store apps are underpowered compared to desktop apps like Chrome, Firefox, and Opera.

5. Click the browser that you’d like to be your default browser. No need to restart; your work is done.

Changing the default browser in Windows 11

1. In Windows 11, after you’ve installed an alternate browser, click the Start button and then click the Settings icon.

2. In Settings, select Apps > Default apps, then scroll to the browser you want to make your default — for example, Google Chrome.

3. Click the arrow next to it, and at the top of the screen that appears, click Set default.

chrome screen in windows 11 with set default button highlighted" class="wp-image-4203104" width="899" height="465" sizes="auto, (max-width: 899px) 100vw, 899px">

Making Google Chrome your default browser in Windows 11.

Preston Gralla / Foundry

4. A checkmark then appears next to “Set default.” To change the default back to Edge or another browser, scroll to the browser you want to be the default and click Set default.

When you do this, some but not all of the file types associated with Edge will become associated with Chrome instead. Below, I’ll show you how to have more than just those file types be opened by your alternate browser.

Some links will still open in Edge

Once you switch the default browser to something other than Edge, clicking most web links in emails, documents, and most other apps will open them in your new default browser. However, some links associated with web browsing will likely still open in Edge — for example, PDF files, some graphics files such as .svg, mailto links, and more.

You can hunt down each of those file types and links and change them individually to your new default browser, but it’s going to take you time. Here’s how to do it.

Changing link defaults in Windows 10

1. In Windows 10, go to Settings > Apps > Default apps > Choose default apps by file type.

2. On the screen that appears, scroll through all the file types and look for those still associated with Microsoft Edge — for example, .pdf.

width="634" height="389" sizes="auto, (max-width: 634px) 100vw, 634px">

Microsoft Edge is still associated with the .pdf file type on this screen.

Preston Gralla / Foundry

3. Click the Microsoft Edge icon to the right of the file type, and from the screen that appears, select your default browser — for example, Google Chrome.

4. You can alternatively choose to have an app from the Microsoft Store run the file. To do it, click Look for an app in the Microsoft Store and follow the directions.

5. After you’ve done that, go to Settings > Apps > Default apps > Choose default apps by protocol and follow the same steps.

Changing link defaults in Windows 11

1. In Windows 11, go to Settings > Apps > Default apps and click your default browser — for example, Google Chrome.

2. Scroll through all the file types and protocols, and click any still associated with Microsoft Edge — for example, .pdf.

Change the file types associated with Edge in Windows 11.

Preston Gralla / Foundry

3. On the pop-up screen that appears, select the browser you want to handle the file type (for example, Google Chrome), then click Set Default. Note that you don’t have to choose your default browser for every file type — you can choose another app, such as a PDF reader for .pdf files.

Even after all that, you may still find that clicking links in the Windows interface itself — such as in the Start menu, Windows Search results, or widgets — will open them in Edge. Microsoft changed this behavior in Windows 11 so that all links open in the user-set default browser, but only in Europe. There’s hope for the rest of us, though: sleuths at Windows Latest discovered flags in early preview software indicating that browser choice may be coming to the Start menu and taskbar. Time will tell.  

This story was originally launched in September 2017 and most recently updated in August 2026.

Related reading:

Kategorie: Hacking & Security

CTM360 Uncovers Over 3,000 Recruitment Phishing URLs Using Browser-in-the-Browser (BitB) Credential Traps

The Hacker News - 3 hodiny 17 min zpět
Cybersecurity researchers have uncovered a large-scale, global recruitment-themed phishing campaign that uses fake interview scheduling pages and Browser-in-the-Browser (BitB) windows to steal Google and Facebook credentials and, in more advanced cases, relay multi-factor authentication (MFA) prompts in real time. CTM360, which detailed the activity in a new report titled RecruitTrap, said it [email protected]
Kategorie: Hacking & Security

RingCentral data breach exposed info of 1.6 million accounts

Bleeping Computer - 3 hodiny 22 min zpět
The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July, according to the data breach notification service Have I Been Pwned. [...]
Kategorie: Hacking & Security

Nejvýhodnější 4K monitor. LG s úhlopříčkou 32" za 3767 Kč nabízí USB-C, dálkový ovladač a systém webOS

Živě.cz - 3 hodiny 29 min zpět
Monitor LG 32U721SA-W zlevnil na 3767 Kč, běžně stojí skoro dvakrát tolik. • Má 32", rozlišení 4K a potěší vstupem USB-C s 65W nabíjením. • Tahákem jsou také integrovaný systém webOS a dálkový ovladač.
Kategorie: IT News

Apple Warns Users in 110 Countries They May Be Targets of Mercenary Spyware

The Hacker News - 3 hodiny 30 min zpět
Apple on Thursday sent a fresh batch of notifications to customers whom it suspects may have been targeted by mercenary spyware attacks. In a statement shared with TechCrunch, the iPhone maker said it alerted an unspecified number of users targeted in 110 countries and that it has notified customers in over 150 countries to date. Apple began sending threat notifications to users in late 2021. Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Crypto wallet maker Trezor confirms 13,000 customers' details exposed in logistics breach

The Register - Anti-Virus - 3 hodiny 45 min zpět
Cryptocurrency hardware wallet maker Trezor has confirmed that a breach at one of its shipping partners exposed the personal data of more than 13,000 customers. The company's initial findings suggested the breach was limited to orders placed in certain countries during the previous 90 days. New information indicates that earlier orders may also be affected. The breach exposed the names, email addresses, phone numbers, and shipping addresses of 11,742 customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who ordered Trezor products between May 10 and August 8. An additional 1,947 customers had their names, home cities, and email addresses exposed. Some members of this group may have placed their orders before May 10. "We are verifying this information and the timeframe with ShipMonk," said Trezor. ShipMonk is Trezor's logistics partner. It stores and ships products on the company's behalf and collects the information needed to fulfill orders. ShipMonk is subject to Trezor's 90-day retention policy, which requires partners to delete or anonymize customer data within 90 days of collecting it for an order. ShipMonk did not immediately respond to a request for comment. Trezor markets itself as a purveyor of secure, offline, hardware-based cryptocurrency wallets. With its products, it aims to shield customers from cyberattacks and malicious apps. While it assured customers that its own systems and devices remain secure, Trezor warned that "affected customers could experience an increase in phishing attempts." The exposed details could help criminals craft convincing phishing attempts impersonating banks, crypto exchanges, or Trezor itself. The company said it contacted affected customers directly and advised them to check any communications against information published through its official channels. "Never enter your wallet backup on a website or share it with anyone," Trezor said in an apologetic advisory. "This is the first time since Trezor was founded in 2013 that we have experienced a breach that exposed customer phone numbers and shipping addresses. "We absolutely understand how serious this is and the potential risks it poses to our customers and are deeply sorry to those affected." Trezor said in a supplementary social media post, separate from the advisory, that its "top priority" project at the moment is to establish an "Anonymous Delivery" option for customers. The service will allow buyers to complete checkout without linking their home address or real-world identity to an order. Customers using Anonymous Delivery will go through a dedicated checkout, use a nickname or label ID in place of a real name, and have their product shipped to an automated delivery locker instead of their home. The delivery will also come in unbranded packaging with a generic sender label. The carrier will only use email or SMS to send a PIN for the locker. Trezor said the service is gearing up for a September launch in the EU and by the end of the year in the US. Alas, that didn't stop Cake Wallet, a rival crypto wallet, from poking fun at Trezor. "Another rough day for self custody," it Xeeted, before suggesting crypto holders instead use an old smartphone with Cake Wallet installed because "there is no order, no shipping address, or customer data tied to the purchase." ®
Kategorie: Viry a Červi

První mRNA vakcína proti chřipce od Moderny získala po složitém schvalování povolení od FDA

Živě.cz - 4 hodiny 29 min zpět
Americký úřad FDA po průtazích schválil první mRNA vakcínu proti chřipce • Očkovací látka mFlusiva od Moderny je určena lidem od padesáti let • Rychlejší výroba umožní daleko lépe reagovat na nové mutace chřipkového viru
Kategorie: IT News
Syndikovat obsah