Compromised Linux SSH servers engage in DDoS attacks, cryptomining
Poorly managed Linux SSH servers are getting compromised by unknown attackers and instructed to engage in DDoS attacks while simultaneously mining cryptocurrency in the background. The Tsunami DDoS bot Tsunami, also known as Kaiten, is a type of DDoS.....»»
GoIssue phishing tool targets GitHub developer credentials
Researchers discovered GoIssue, a new phishing tool targeting GitHub users, designed to extract email addresses from public profiles and launch mass email attacks. Marketed on a cybercrime forum, GoIssue allows attackers to send bulk emails while kee.....»»
Zscaler Zero Trust Segmentation prevents lateral movement from ransomware attacks
Zscaler announced a Zero Trust Segmentation solution to provide a more secure, agile and cost-effective means to connect users, devices, and workloads across and within globally distributed branches, factories, campuses, data centers, and public clou.....»»
Hot Topic breach: Has your credit card info been compromised?
If you’re wondering whether your personal and financial data has been compromised in the massive Hot Topic breach, you can use two separate online tools to check: Have I Been Pwned? or DataBreach.com. Which data was compromised? News of a poten.....»»
Massive troves of Amazon, HSBC employee data leaked
A threat actor who goes by the online moniker “Nam3L3ss” has leaked employee data belonging to a number of corporations – including Amazon, 3M, HSBC and HP – ostensibly compromised during the May 2023 MOVEit hack by the Cl0p r.....»»
LED light strategy deters Great White shark attacks
Surfers could be protected from future shark attacks following new discoveries about how to trick sharks' visual systems made by Professor Nathan Hart, head of Macquarie University's Neurobiology Lab, Dr. Laura Ryan and colleagues......»»
November 2024 Patch Tuesday forecast: New servers arrive early
Microsoft followed their October precedent set with Windows 11 24H2 and announced Microsoft Server 2025 on the first of November. We were expecting the official announcement at Microsoft Ignite near the end of the month, but with the early release, e.....»»
Discord terrorist known as “Rabid” gets 30 years for preying on kids
FBI considers 764 terror network a top threat to kids online. A Michigan man who ran chat rooms and Discord servers targeting children playing online games and coercing them into.....»»
Why AI-enhanced threats and legal uncertainty are top of mind for risk executives
AI-enhanced malicious attacks are the top emerging risk for enterprises in the third quarter of 2024, according to Gartner. Key emerging risks for enterprises It’s the third consecutive quarter with these attacks being the top of emerging risk. IT.....»»
Apple Intelligence may get an M4 upgrade
According to , Apple is talking with its biggest iPhone manufacturing partner, , about building new servers in Taiwan. More servers will mean more processing power for Apple Intelligence features, allowing more people to complete more complex tasks......»»
Apple in talks with Foxconn to build Apple Intelligence servers in Taiwan
Apple wants to tap the talent at Foxconn to power its Apple Intelligence servers, though the supplier may already be at capacity.Apple IntelligenceApple has been ramping up efforts for Apple Intelligence, its user-centric suite of artificial intellig.....»»
Key cybersecurity predictions for 2025
In this Help Net Security video, Chris Gibson, CEO at FIRST, discusses the evolving threat landscape and provides a unique take on where data breaches and cyber attacks will be in 2025. The post Key cybersecurity predictions for 2025 appeared first o.....»»
Suspect arrested in Snowflake data-theft attacks affecting millions
Threat actor exploited account credentials swept up by infostealers years earlier. Canadian authorities have arrested a man on suspicion he breached hundreds of accounts belonging.....»»
New survey finds alarming tolerance for attacks on the press in US, particularly among white, Republican men
Press freedom is a pillar of American democracy. But political attacks on US-based journalists and news organizations pose an unprecedented threat to their safety and the integrity of information......»»
Beware of phishing emails delivering backdoored Linux VMs!
Unknown attackers are trying to trick Windows users into spinning up a custom Linux virtual machine (VM) with a pre-configured backdoor, Securonix researchers have discovered. The campaign The attack began with a phishing email, they believe, but the.....»»
Open-source software: A first attempt at organization after CRA
The open-source software (OSS) industry is developing the core software for the global infrastructure, to the point that even some proprietary software giants adopt Linux servers for their cloud services. Still, it has never been able to get organize.....»»
Millions of Synology NAS devices vulnerable to zero-click attacks (CVE-2024-10443)
Synology has released fixes for an unauthenticated “zero-click” remote code execution flaw (CVE-2024-10443, aka RISK:STATION) affecting its popular DiskStation and BeeStation network attached storage (NAS) devices. About CVE-2024-10443 CV.....»»
Thousands of hacked TP-Link routers used in yearslong account takeover attacks
The botnet is being skillfully used to launch "highly evasive" password-spraying attacks. Hackers working on behalf of the Chinese government are using a botnet of thousands of ro.....»»
Thousands of hacked TP-Link routers used in years-long account takeover attacks
The botnet is being skillfully used to launch "highly evasive" password-spraying attacks. Hackers working on behalf of the Chinese government are using a botnet of thousands of ro.....»»
OpenPaX: Open-source kernel patch that mitigates memory safety errors
OpenPaX is an open-source kernel patch that mitigates common memory safety errors, re-hardening systems against application-level memory safety attacks using a simple Linux kernel patch. It’s available under the same GPLv2 license terms as the.....»»
EA removes Apex Legends from Steam Deck due to Linux cheating
Linux and Steam Deck users will no longer be able to play Apex Legends so EA could work on cheaters......»»