Patch ASAP: Holes used to raid top-tier targets and stash info in Kim Dotcom's old cloud file locker Microsoft says Beijing-backed hackers are exploiting four zero-day vulnerabilities in Exchange Server to steal data from defense contractors, law firms, and infectious disease researchers.... [...]
Announced rules also require fast takedowns of content, online profile verification, and more After a three-year review process, India has announced strict regulations for instant chat services, social network operators, and video-streaming companies.... [...]
13m passengers a day, a million tickets bought on digital platforms, and yet few details offered on what went wrong Indian Railways has revealed it has suffered "a number of incidents... regarding breaches in various IT applications" and appears to have blamed some of them on sloppy infosec practices …
If you don’t patch, the hosts driving all your virty servers are at risk. So maybe your to-do list needs a tickle? VMware has revealed a critical-rated bug in the HTML5 client for its flagship vSphere hybrid cloud suite.... [...]
Behaves like a legit software installer and phones home for instructions, but lacks a payload US security consultancy Red Canary says it’s found MacOS malware written specifically for the shiny new M1 silicon that Apple created to power its post-Intel Macs.... [...]
Rival atheists accused of not believing in privacy law The Atheist Alliance International, an organisation that works to demystify atheism and advocate for secular governance, has warned members their personal information appears to have been leaked.... [...]
We’ll be fine, says Redmond security crew. No word on whether you will be too once crims analyse their haul Microsoft has admitted that as a result of installing backdoored SolarWinds tools in some parts of its corporate network, portions of its source code was obtained and exfiltrated …
Web hosts infiltrated for up to three years in attack that somewhat resembles SolarWinds mess France’s Agence nationale de la sécurité des systèmes d'information (ANSSI), the nation’s cyber-security agency, has identified a years-long campaign to infiltrate IT monitoring platform Centreon.... [...]
As FireEye reveals how suspicious second phone signed up for 2FA gave the game away Microsoft president Brad Smith said the software giant’s analysis of the SolarWinds hack suggests the code behind the crack was the work of a thousand or more developers.... [...]
United Nations sanctions made silly by sloppy security North Korean attacks on crypto exchanges reportedly netted an estimated $316m in cryptocurrency in 2019 and 2020, according to a report by Japan’s Nikkei.... [...]
As China bristles, USA, Japan, India, and Australia create forum to explore the intersection of tech and regional security Universities and think tanks from Australia, the USA, Japan, and India have come together in a new group that together hopes to advance discussions on the intersection of information technology …
And we all know how good small business are at patching... NOT Cisco has addressed a clutch of critical vulnerabilities in its small business and VPN routers that can be exploited by an unauthenticated, remote attacker to execute arbitrary code as the root user. All the attacker needs to …
Oh look, Cloudflare spots a sudden surge in use of other messaging apps The new self-appointed military government of Myanmar has temporarily banned Facebook.... [...]
Censorship-busting tool updated, advice on how to use it to evade blockades published China's recent upgrades to its content-blocking Great Firewall can be circumvented, according to censorship fighters from the Great Firewall Report.... [...]
Salted password hashes, addresses, phone numbers may have been exposed in cloud security snafu Networking vendor Ubiquiti has written to its customers to advise them of a possible leak of their personal information.... [...]
Post-Flashpocalypse, we stumble outside, hoping no one ever creates software as insecure as that ever again Adobe has finally and formally killed Flash.... [...]
Alipay, WeChat and friends ‘threaten national security, foreign policy, and economy of the United States’ United States president Donald Trump has signed an executive order banning the use of eight Chinese apps, namely Alipay, CamScanner, QQ Wallet, SHAREit, Tencent QQ, VMate, WeChat Pay, and WPS Office.... [...]
Privacy policy re-written, which is somewhat scary given Singapore has made trackers just-about-mandatory The Singapore government has decided to use data gathered by its TraceTogether COVID-19-coronavirus contact-tracing app in criminal investigations.... [...]
CISA flags ‘further hardening’ advice as Microsoft reveals internal account compromises The extent and impact of the SolarWinds hack became even more apparent – and terrifying – over the holiday break.... [...]
CISA flags ‘further hardening’ advice as Microsoft reveals internal account compromises The extent and impact of the SolarWinds hack became even more apparent – and terrifying – over the holiday break.... [...]