A Teen Took Control of Teslas by Hacking a Third-Party App
Credit to Author: Brian Barrett| Date: Sat, 15 Jan 2022 14:29:31 +0000
Plus: Open source sabotage, Ukrainian website hacks, and more of the week’s top security news.
Read MoreComputer Security Articles
RSS Reader for Computer Security Articles
Security
Russia Takes Down REvil Hackers—as Ukraine Tensions Mount
Credit to Author: Matt Burgess, Lily Hay Newman| Date: Fri, 14 Jan 2022 18:17:29 +0000
Over a dozen alleged members of the notorious ransomware group have been arrested, but the Kremlin’s critics are wary of the underlying motivation.
Read More20 years after Gates’ call for trustworthy computing, we’re still not there
Credit to Author: Susan Bradley| Date: Mon, 17 Jan 2022 03:42:00 -0800
Do you feel more secure? Is your computing experience more trustworthy these days?
Seriously — you’re reading this article on a computer or phone, connecting to this site on an internet shared with your Grandma as well as Russian hackers, North Korean attackers, and lots of teenagers looking at TikTok videos. It’s been 20 years since then-Microsoft CEO Bill Gates wrote his Trustworthy Computing memo where he emphasized security in the company’s products.
So are we actually more secure now?
I’m going to keep in mind the side effects from last week’s Patch Tuesday security updates and consider them in my answer. First, the good news: I don’t see major side effects occurring on PCs not connected to active directory domains (and I haven’t seen any showstoppers in testing my hardware at home). I can still print to my local HP and Brother printers. I can surf and access files. So, while I’m not ready yet to give an all-clear to install the January updates, when I do, I doubt you’ll see side effects.
North Korean Hackers Stole Nearly $400M in Crypto Last Year
Credit to Author: Andy Greenberg| Date: Thu, 13 Jan 2022 13:00:00 +0000
The regime had a “banner year,” thanks to skyrocketing cryptocurrency values and a new generation of vulnerable startups.
Read MorePatch Tuesday gets off to a busy start for January
Credit to Author: Greg Lambert| Date: Fri, 14 Jan 2022 12:10:00 -0800
For this week’s Patch Tuesday, the first of the year, Microsoft addressed 97 security issues, six of them rated critical. Though six vulnerabilities have been publicly reported, I do not classify them as zero-days. Microsoft has fixed a lot of security related issues and is aware of several known issues that may have inadvertently caused significant server issues including:
- Hyper-V, which no longer starts with the message, “Virtual machine xxx could not be started because the hypervisor is not running.”
- ReFS (Resilient) file systems that are no longer accessible (which is kind of ironic).
- And Windows domain controller boot loops.
There are a variety of known issues this month, and I’m not sure whether we’ll see more issues reported with the January server patches. You can find more information on the risk of deploying these latest updates with our helpful infographic.
Cellular networks revolt against Apple privacy moves
Credit to Author: Jonny Evans| Date: Wed, 12 Jan 2022 09:43:00 -0800
Every time Apple attempts to inject a little more privacy into the digital world, it faces pushback – but the evidence suggests opponents would be better off going along for the ride.
A bigger business with more privacy
Take Do Not Track for ads and the move to quash IDFA tracking in iOS 14. When Apple first announced its plan, critics across the ad industry complained it would damage their business.
Apple counter-argued that it would simply inspire advertisers to think more creatively about how to reach customers — while also providing more privacy to those customers.
NSO Group Spyware Targeted Dozens of Reporters in El Salvador
Credit to Author: Lily Hay Newman| Date: Thu, 13 Jan 2022 02:00:18 +0000
The newly disclosed campaign shows how little the company has done to curb abuses of its powerful surveillance tools.
Read MoreMicrosoft touts first PCs to ship natively with secure Pluton chip
Credit to Author: Lucas Mearian| Date: Wed, 12 Jan 2022 03:00:00 -0800
As organizations continue to wrestle with how to manage a hybrid workforce, security outside the corporate firewall continues to play a huge role in day-to-day IT operations.
Following the October release of Windows 11, which boasted features aimed at enabling hybrid work, Microsoft last week announced the first PCs with its Pluton chip-to-cloud security technology. The technology is aimed at securing the computers of remote workers and others.
At CES, Microsoft announced that Lenovo and chipmaker AMD have launched the first laptops — the ThinkPad Z13 and ThankPad Z16 — that come natively with the Pluton security chips. Pricing for the ThinkPad Z13 starts at $1,549, pricing for the ThinkPad Z16 starts at $2,099. Both laptops will be available in May and Lenovo said there is no additional cost associated with the Pluton chip inside.