Huawei’s Kirin X90 chip receives security certification ahead of rumoured launch of HarmonyOS-based PC next month This article has been indexed from Silicon UK Read the original article: New Huawei Chip Appears As Company Shifts Away From Windows, Intel
South Korea Sees China Chip Exports Slump
South Korean chip exports to China fall by nearly one-third after US government restricts sales of AI-friendly HBM memory This article has been indexed from Silicon UK Read the original article: South Korea Sees China Chip Exports Slump
TikTok rolls out a new Security Checkup tool. Here’s how it works
Are the company’s new security features enough to quiet the anti-TikTok voices? This article has been indexed from Latest stories for ZDNET in Security Read the original article: TikTok rolls out a new Security Checkup tool. Here’s how it works
CISO Global launches AI-driven cloud security solution
CISO Global launched of CISO Edge, its next-generation AI-driven cloud security solution, now available to existing customers and channel partners. Built to meet the growing demand for enterprise-grade cybersecurity, CISO Edge delivers comprehensive cloud-first, hybrid, and remote security—ensuring organizations can…
Biometrische Merkmale als Schlüssel für die sichere Authentifizierung
Unternehmen sind branchenübergreifend auf biometrische Identifizierungssysteme angewiesen, um Zugänge möglichst sicher und komfortabel zu gestalten. Dieser Artikel wurde indexiert von IT-News Cybersicherheit – silicon.de Lesen Sie den originalen Artikel: Biometrische Merkmale als Schlüssel für die sichere Authentifizierung
Bad Update: Neuer Exploit knackt Xbox 360 per USB-Stick
In der Xbox-Community sorgt ein neuer Softwareexploit für Aufsehen. Mit wenig Aufwand lassen sich Homebrews auf der Xbox 360 ausführen. (Spielekonsole, Xbox 360) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen Artikel: Bad Update: Neuer Exploit…
SocGholish’s Intrusion Techniques Facilitate Distribution of RansomHub Ransomware
Trend Research analyzed SocGholish’s MaaS framework and its role in deploying RansomHub ransomware through compromised websites, using highly obfuscated JavaScript loaders to evade detection and execute various malicious tasks. This article has been indexed from Trend Micro Research, News and…
Marktkonsolidierung: Chancen und Risiken für KMU
Starker Wettbewerb und strenge Regularien setzen KMU in der Sicherheitstechnik unter Druck. Das stellt viele Anbieter vor die Frage einer möglichen Konsolidierung. Doch birgt das Gefahren oder bieten sich sogar Gelegenheiten? Dieser Artikel wurde indexiert von Newsfeed Lesen Sie den…
ClearFake’s New Widespread Variant: Increased Web3 Exploitation for Malware Delivery
Introduction ClearFake is a malicious JavaScript framework deployed on compromised websites to deliver malware through the drive-by download technique. When it first emerged in July 2023, the injected code was designed to display a fake web browser download page, tricking…
Telegram’s Durov Allowed To Leave France As Probe Continues
Telegram founder Durov permitted to temporarily leave France as authorities continue probe into criminal activity on service This article has been indexed from Silicon UK Read the original article: Telegram’s Durov Allowed To Leave France As Probe Continues
Crypto Platform OKX Suspends Tool Abused by North Korean Hackers
Cryptocurrency platform OKX has announced the temporary suspension of its Decentralized Exchange (DEX) aggregator tool. This decision comes on the heels of coordinated attacks by certain media outlets and unsuccessful attempts by the notorious Lazarus Group—a hacking entity linked to…
New StilachiRAT uses sophisticated techniques to avoid detection
Microsoft discovered a new remote access trojan (RAT), dubbed StilachiRAT, that uses sophisticated techniques to avoid detection. In November 2024, Microsoft researchers discovered StilachiRAT, a sophisticated remote access trojan (RAT) designed for stealth, persistence, and data theft. Analysis of its…
Python Bot Delivered Through DLL Side-Loading, (Tue, Mar 18th)
One of my hunting rules triggered some suspicious Python code, and, diving deeper, I found an interesting example of DLL side-loading. This technique involves placing a malicious DLL with the same name and export structure as a legitimate DLL in…
Cobalt Strike 4.11 Released with Built-In Evasion Features for Red Teams
Cobalt Strike, a highly advanced threat emulation tool, has released version 4.11, packing a robust suite of features designed to enhance evasion capabilities for red teams. This latest update introduces several novel technologies and improvements, solidifying Cobalt Strike’s position as…
Google Released Open Source Version of OSV-Scanner Tool for Vulnerability Scanning
Google has officially launched OSV-Scanner V2.0.0, a major upgrade to its open-source vulnerability scanning tool. Released on March 17, 2025, this new version represents a significant evolution in helping developers identify and fix security vulnerabilities in their software dependencies. The…
Microsoft Warns of StilachiRAT: A Stealthy RAT Targeting Credentials and Crypto Wallets
Microsoft is calling attention to a novel remote access trojan (RAT) named StilachiRAT that it said employs advanced techniques to sidestep detection and persist within target environments with an ultimate aim to steal sensitive data. The malware contains capabilities to…
IT Security News Hourly Summary 2025-03-18 09h : 4 posts
4 posts were published in the last hour 7:32 : Extortion crew threatened to inform Edward Snowden (?!) if victim didn’t pay up 7:32 : GitHub repositories targeted, Apache Tomcat RCE exploit, BEC campaigns target Microsoft 365 7:14 : Nach…
Extortion crew threatened to inform Edward Snowden (?!) if victim didn’t pay up
Don’t laugh. This kind of warning shows crims are getting desperate Dark web analysts at infosec software vendor Fortra have discovered an extortion crew named Ox Thief that threatened to contact Edward Snowden if a victim didn’t pay to protect…
GitHub repositories targeted, Apache Tomcat RCE exploit, BEC campaigns target Microsoft 365
23,000 repositories targeted in popular GitHub action Apache Tomcat RCE exploit hits servers—no authentication required Microsoft 365 users targeted in new BEC campaigns Thanks to this week episode sponsor, DeleteMe Data brokers bypass online safety measures to sell your name,…
Nach weltweitem Ausfall: Google verteilt Fehlerkorrektur für alle Chromecasts
Die von Google unbrauchbar gemachten Chromecast-Modelle lassen sich wieder aktivieren. Die Ursache des Fehlers wird weiter verschwiegen. (Chromecast, Google) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen Artikel: Nach weltweitem Ausfall: Google verteilt Fehlerkorrektur für alle…
Thousands of British musicians fall silent over government AI plans
More than 1,000 British musicians have released a groundbreaking protest album titled “Is This What We Want?” Featuring notable artists such as Kate Bush, Annie… The post Thousands of British musicians fall silent over government AI plans appeared first on…
Anzeige: Microsoft-365-Sicherheit professionell verwalten
Die Sicherheit von Microsoft 365 ist für Unternehmen essenziell. Dieser Workshop vermittelt IT-Admins das nötige Wissen, um Securityfunktionen optimal zu konfigurieren und Bedrohungen wirksam abzuwehren. (Golem Karrierewelt, Verschlüsselung) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen…
PoC Exploit Released for Linux Kernel Use-After-Free Vulnerability
A proof-of-concept (PoC) exploit has been released for a use-after-free vulnerability in the Linux kernel, identified as CVE-2024-36904. This vulnerability is located in the TCP subsystem of the Linux kernel and is caused by the inet_twsk_hashdance() function inserting the time-wait socket into…
Critical Apache Tomcat RCE Vulnerability Exploited in Just 30hrs of Public Exploit
Security researchers have confirmed that a critical remote code execution (RCE) vulnerability in Apache Tomcat, tracked as CVE-2025-24813, is being actively exploited in the wild. The vulnerability, which enables attackers to take control of servers with a simple PUT request,…