A Teen Took Control of Teslas by Hacking a Third-Party App

Credit to Author: Brian Barrett| Date: Sat, 15 Jan 2022 14:29:31 +0000
Plus: Open source sabotage, Ukrainian website hacks, and more of the week’s top security news.
Read MoreRSS Reader for Computer Security Articles

Credit to Author: Brian Barrett| Date: Sat, 15 Jan 2022 14:29:31 +0000
Plus: Open source sabotage, Ukrainian website hacks, and more of the week’s top security news.
Read More
Credit to Author: BrianKrebs| Date: Fri, 28 Jan 2022 13:18:36 +0000
In December 2021, researchers discovered a new ransomware-as-a-service named ALPHV (a.k.a. “BlackCat”), considered to be the first professional cybercrime group to create and use a ransomware strain in the Rust programming language. In this post, we’ll explore some of the clues left behind by the developer who was reputedly hired to code the ransomware variant.
Read More
Credit to Author: Susan Bradley| Date: Mon, 17 Jan 2022 03:42:00 -0800
Do you feel more secure? Is your computing experience more trustworthy these days?
Seriously — you’re reading this article on a computer or phone, connecting to this site on an internet shared with your Grandma as well as Russian hackers, North Korean attackers, and lots of teenagers looking at TikTok videos. It’s been 20 years since then-Microsoft CEO Bill Gates wrote his Trustworthy Computing memo where he emphasized security in the company’s products.
So are we actually more secure now?
I’m going to keep in mind the side effects from last week’s Patch Tuesday security updates and consider them in my answer. First, the good news: I don’t see major side effects occurring on PCs not connected to active directory domains (and I haven’t seen any showstoppers in testing my hardware at home). I can still print to my local HP and Brother printers. I can surf and access files. So, while I’m not ready yet to give an all-clear to install the January updates, when I do, I doubt you’ll see side effects.

Credit to Author: Matt Burgess, Lily Hay Newman| Date: Fri, 14 Jan 2022 18:17:29 +0000
Over a dozen alleged members of the notorious ransomware group have been arrested, but the Kremlin’s critics are wary of the underlying motivation.
Read More
Credit to Author: BrianKrebs| Date: Tue, 25 Jan 2022 19:48:40 +0000
What’s worse than finding out that identity thieves took out a 546 percent interest payday loan in your name? How about a 900 percent interest loan? Or how about not learning of the fraudulent loan until it gets handed off to collection agents? One reader’s nightmare experience spotlights what can happen when ID thieves and hackers start targeting online payday lenders.
Read More
Credit to Author: Greg Lambert| Date: Fri, 14 Jan 2022 12:10:00 -0800
For this week’s Patch Tuesday, the first of the year, Microsoft addressed 97 security issues, six of them rated critical. Though six vulnerabilities have been publicly reported, I do not classify them as zero-days. Microsoft has fixed a lot of security related issues and is aware of several known issues that may have inadvertently caused significant server issues including:
There are a variety of known issues this month, and I’m not sure whether we’ll see more issues reported with the January server patches. You can find more information on the risk of deploying these latest updates with our helpful infographic.

Credit to Author: Andy Greenberg| Date: Thu, 13 Jan 2022 13:00:00 +0000
The regime had a “banner year,” thanks to skyrocketing cryptocurrency values and a new generation of vulnerable startups.
Read More
Credit to Author: BrianKrebs| Date: Fri, 21 Jan 2022 17:11:36 +0000
Up for the “Most Meta Cybercrime Offering” award this year is Accountz Club, a new cybercrime store that sells access to purloined accounts at services built for cybercriminals, including shops peddling stolen payment cards and identities, spamming tools, email and phone bombing services, and those selling authentication cookies for a slew of popular websites.
Read More