PoC exploit for abused PaperCut flaw is now public (CVE-2023-27350)
An unauthenticated RCE flaw (CVE-2023-27350) in widely-used PaperCut MF and NG print management software is being exploited by attackers to take over vulnerable application servers, and now there’s a public PoC exploit. About the vulnerability.....»»
GoIssue phishing tool targets GitHub developer credentials
Researchers discovered GoIssue, a new phishing tool targeting GitHub users, designed to extract email addresses from public profiles and launch mass email attacks. Marketed on a cybercrime forum, GoIssue allows attackers to send bulk emails while kee.....»»
Aerospace employees targeted with malicious “dream job” offers
It’s not just North Korean hackers who reach out to targets via LinkedIn: since at least September 2023, Iranian threat actor TA455 has been trying to compromise workers in the aerospace industry by impersonating job recruiters on the popular e.....»»
iOS 18.2 public beta 2 now available, here’s everything new
Apple has released iOS 18.2 public beta 2 for users today. The latest update includes all of the new Apple Intelligence capabilities of iOS 18.2 plus a handful of changes and performance improvements. Here’s everything new. more….....»»
Public beta 2 for macOS 15.2, iPadOS 18.2, and more adds these new features
One week after the first public betas launched, Apple has released new public beta 2 builds for macOS Sequoia 15.2, iPadOS 18.2, tvOS 18.2, and watchOS 11.2. Here’s everything that’s new. more….....»»
Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039)
November 2024 Patch Tuesday is here, and Microsoft has dropped fixes for 89 new security issues in its various products, two of which – CVE-2024-43451 and CVE-2024-49039 – are actively exploited by attackers. The exploited vulnerabilities.....»»
iOS 18.2 could receive a full public release with Image Playground & ChatGPT on December 9
iOS 18.2 with access to ChatGPT integrations, Image Playground, and Genmoji could finally roll out to the general public on December 9 based on a notice recently posted by a UK carrier.iOS 18.2 could receive a full public release on December 9.On Mon.....»»
More evidence that Europe"s ancient landscapes were open woodlands: Study finds oak, hazel and yew were abundant
In 2023 a research group from Aarhus University in Denmark found that light woodland and open vegetation dominated Europe's temperate forests before Homo sapiens. In a new study, recently published in the Journal of Ecology, they take a closer look a.....»»
What can we expect at the COP29 Climate Conference?
With a climate-denialist re-elected as US president and another petrostate host (following Dubai in 2023)—hopes for ambitious outcomes at the 29th UN Climate Change "Conference of the Parties" (COP29) in Baku, Azerbaijan are not high......»»
Zscaler Zero Trust Segmentation prevents lateral movement from ransomware attacks
Zscaler announced a Zero Trust Segmentation solution to provide a more secure, agile and cost-effective means to connect users, devices, and workloads across and within globally distributed branches, factories, campuses, data centers, and public clou.....»»
Ars Live: Our first encounter with manipulative AI
On Nov. 19, join Benj Edwards and Simon Willison's live YouTube chat about the "Great Bing Chat Fiasco of 2023." In the short-term, the most dangerous thing about AI language mode.....»»
Massive troves of Amazon, HSBC employee data leaked
A threat actor who goes by the online moniker “Nam3L3ss” has leaked employee data belonging to a number of corporations – including Amazon, 3M, HSBC and HP – ostensibly compromised during the May 2023 MOVEit hack by the Cl0p r.....»»
macOS Sequoia 15.2 beta 3 available now for download
A new beta for macOS Sequoia 15.2 is rolling out now to developers. Beta 3 brings the latest revisions and improvements to Mac users ahead of the public 15.2 launch next month. more….....»»
The public implications of private substitutes for electric grid reliability
Climate change events have, in recent years, placed increasing strain on public electrical grids in the United States. In response to this vulnerability, some consumers are turning to private alternatives to the electric utility, like generators and.....»»
Private jet carbon emissions soar 46%: Study
The carbon footprint from private jet travel grew 46 percent between 2019 and 2023 and will keep rising unless the ultra-luxury industry is regulated, according to new research published Thursday......»»
In your face: our acceptance of facial recognition technology depends on who is doing it—and where
Facial recognition technology is becoming more widely used, but this has not been matched by wider acceptance from the public......»»
Critical Palo Alto Networks Expedition bug exploited (CVE-2024-5910)
A vulnerability (CVE-2024-5910) in Palo Alto Networks Expedition, a firewall configuration migration tool, is being exploited by attackers in the wild, the Cybersecurity and Infrastructure Security Agency (CISA) confirmed on Thursday. About CVE-2024-.....»»
When countries hide their public debt, they hurt themselves, their citizens and their lenders, say economists
Economists from the International Monetary Fund (IMF) recently announced that global public debt would soon collectively catch up to the worldwide gross domestic product (GDP), likely matching it by 2030. New research from the University of Notre Dam.....»»
Power of aesthetic species on social media boosts wildlife conservation efforts, say experts
Facebook and Instagram can boost wildlife conservation efforts through public awareness and engagement, according to a study published in the peer-reviewed journal Environmental Communication......»»
Restoring Mexico"s archaeological heritage to its rightful place
A Mexican delegation is coming to retrieve 84 Mesoamerican axes currently in transit at UdeM, underscoring the need to raise public awareness of the looting of archaeological artifacts......»»
A closer look at the 2023-2030 Australian Cyber Security Strategy
In this Help Net Security video, David Cottingham, CEO of Airlock Digital, discusses the 2023-2030 Australian Cyber Security Strategy and reviews joint and individual cybersecurity efforts, progress, and strategies over the past year. The Australian.....»»