Posted inNews
From Dark Reading – Zero-Click RCE Bug in macOS Calendar Exposes iCloud Data
A researcher bypassed the Calendar sandbox, Gatekeeper, and TCC in a chain attack that allowed for wanton theft of iCloud photos. Read More
Posted inNews
From Dark Reading – ‘Marko Polo’ Creates Globe-Spanning Cybercrime Juggernaut
The Eastern European group is actively expanding its financial fraud activities, with its pipelines representing a veritable Silk Road for the transfer of cryptocurrency, and lucrative and exploitable data. Read More
Posted inNews
From Security Week – Hundreds of Pagers Exploded in Lebanon and Syria in a Deadly Attack. Here’s What We Know.
[[{"value":"Very small explosive devices may have been built into the pagers prior to their delivery to Hezbollah, and then all remotely triggered simultaneously. The post Hundreds of Pagers Exploded in…
Posted inNews
From Dark Reading – RT News Hosted Russian Cyber Spy Unit, US Says
US State Department warns that Kremlin-backed media outlets in democracies around the world are hiding Russian cyber spies and actively working to sow discord. Read More
Posted inArticles
From Graham Cluley – The AI Fix #16: GPT-4o1, AI time travelers, and where’s my driverless car?
[[{"value":"In episode 16 of The AI Fix, Mark and Graham meet GPT-4o1 and ask if it knows how many cousins Alice’s sister has, a top cop wants AI injected into…
Posted inNews
From Dark Reading – Apple Abandons Spyware Suit to Avoid Sharing Cyber Secrets
Despite more US sanctions against spyware operators, Apple decided the cost in terms of disclosures about its own anti-spyware efforts was too great. Read More
Posted inNews
From Security Week – VMware Patches Remote Code Execution Flaw Found in Chinese Hacking Contest
[[{"value":"VMware warned that an attacker with network access could send a specially crafted packet to execute remote code. CVSS severity score 9.8/10. The post VMware Patches Remote Code Execution Flaw…
Posted inNews
From Security Week – Intezer Raises $33M to Extend AI-Powered SOC Platform
[[{"value":"Intezer is looking to tap into booming market for AI-powered tooling to address the severe shortage of skilled cybersecurity professionals. The post Intezer Raises $33M to Extend AI-Powered SOC Platform…
Posted inArticles
From Schneier on Security – Remotely Exploding Pagers
Wow. It seems they all exploded simultaneously, which means they were triggered. Were they each tampered with physically, or did someone figure out how to trigger a thermal runaway remotely?…
Posted inNews
From Security Week – C/side Raises $6 Million to Secure the Browser Supply Chain
[[{"value":"C/side has raised $6 million in a seed-stage funding round to help organizations protect against malicious browser third-party scripts. The post C/side Raises $6 Million to Secure the Browser Supply…
Posted inNews
From Security Week – Hezbollah Members Among Hundreds Wounded after Pagers Explode in Lebanon and Syria, Officials Say
[[{"value":"A Hezbollah official speculated that malware may have caused the pagers to heat up and explode. The post Hezbollah Members Among Hundreds Wounded after Pagers Explode in Lebanon and Syria,…
_Skorzewiak_Alamy.jpg)
Posted inNews
From Dark Reading – The Current Cybersecurity Landscape: New Threats, Same Security Mistakes
It is imperative to develop robust policies for new tech and future-proofing by favoring investments in security. Read More
Posted inNews
From Security Week – Software Security Firm RunSafe Raises $12 Million in Series B Funding
[[{"value":"RunSafe Security has raised $12 million in a Series B funding round for a solution designed to help companies develop secure software. The post Software Security Firm RunSafe Raises $12…
Posted inNews
From Security Week – The AI Threat: Deepfake or Deep Fake? Unraveling the True Security Risks
[[{"value":"When it comes to adversarial use of AI, the real question is whether the AI threat is a deep fake, or whether the deepfake is the AI threat. The post…
Posted inNews
From Security Week – D-Link Patches Critical Router Vulnerabilities
[[{"value":"D-Link has released patches for critical vulnerabilities that could allow attackers to execute arbitrary code and commands on routers. The post D-Link Patches Critical Router Vulnerabilities appeared first on SecurityWeek."}]] Read…