RSS Reader for Computer Security Articles
Credit to Author: Andy Greenberg, Matt Burgess| Date: Wed, 03 Apr 2024 13:54:14 +0000
The thwarted XZ Utils supply chain attack was years in the making. Now, clues suggest nation-state hackers were behind the persona that inserted the malicious code.
Read More
Credit to Author: BrianKrebs| Date: Thu, 11 Apr 2024 20:48:06 +0000
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) said today it is investigating a breach at business intelligence company Sisense, whose products are designed to allow companies to view the status of multiple third-party online services in a single dashboard. CISA urged all Sisense customers to reset any credentials and secrets that may have been shared with the company, which is the same advice Sisense gave to its customers Wednesday evening.
Read More
Credit to Author: Dan Goodin, Ars Technica| Date: Tue, 02 Apr 2024 08:00:00 +0000
Details are starting to emerge about a stunning supply chain attack that sent the open source software community reeling.
Read More
Credit to Author: BrianKrebs| Date: Wed, 10 Apr 2024 14:28:17 +0000
On April 9, Twitter/X began automatically modifying links that mention “twitter.com” to redirect to “x.com” instead. But over the past 48 hours, dozens of new domain names have been registered that demonstrate how this change could be used to craft convincing phishing links — such as fedetwitter[.]com, which is currently rendered as fedex.com in tweets.
Read More
Credit to Author: Dell Cameron, Andrew Couts| Date: Mon, 01 Apr 2024 21:22:02 +0000
To settle a years-long lawsuit, Google has agreed to delete “billions of data records” collected from users of “Incognito mode,” illuminating the pitfalls of relying on Chrome to protect your privacy.
Read More
Credit to Author: BrianKrebs| Date: Tue, 09 Apr 2024 20:28:17 +0000
If only Patch Tuesdays came around infrequently — like total solar eclipse rare — instead of just creeping up on us each month like The Man in the Moon. Although to be fair, it would be tough for Microsoft to eclipse the number of vulnerabilities fixed in this month’s patch batch — a record 147 flaws in Windows and related software.
Read More
Credit to Author: Matt Burgess| Date: Mon, 01 Apr 2024 06:00:00 +0000
Millions lost internet service after three cables in the Red Sea were damaged. Houthi rebels deny targeting the cables, but their missile attack on a cargo ship, left adrift for months, is likely to blame.
Read More
Credit to Author: BrianKrebs| Date: Thu, 04 Apr 2024 14:12:16 +0000
A cybercrook who has been setting up websites that mimic the self-destructing message service Privnote.com accidentally exposed the breadth of their operations recently when they threatened to sue a software company. The disclosure revealed a profitable network of phishing sites that behave and look like the real Privnote, except that any messages containing cryptocurrency addresses will be automatically altered to include a different payment address controlled by the scammers.
Read More