This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Monday, July 29th, 2024…
Secure Boot useless on hundreds of PCs from major vendors after key leak
Plus: More stalkerware exposure; a $16M TracFone fine; Ransomware victims don’t use MFA, and more Infosec in brief Protecting computers’ BIOS and the boot process is essential for modern security – but knowing it’s important isn’t the same as actually…

Quickie: Password Cracking & Energy, (Sun, Jul 28th)
When Johannes talked about my diary entry “Protected OOXML Spreadsheets” on his StormCast podcast, he mentioned that I privately shared data on the power consumption of my desktop with a NVIDIA GeForce RTX 3080 GPU when running Hashcat. This article…
CrowdStrike Outage Themed Maldoc, (Mon, Jul 29th)
I found a malicious Word document with VBA code using the CrowdStrike outage for social engineering purposes. It's an .ASD file (AutoRecover file). My tool oledump.py can analyze it: This article has been indexed from SANS Internet Storm Center, InfoCON:…
Quickie: Password Cracking & Energy, (Sun, Jul 28th)
When Johannes talked about my diary entry “Protected OOXML Spreadsheets” on his StormCast podcast, he mentioned that I privately shared data on the power consumption of my desktop with a NVIDIA GeForce RTX 3080 GPU when running Hashcat. This article…
French authorities launch disinfection operation to eradicate PlugX malware from infected hosts
French authorities and Europol are conducting a “disinfection operation” targeting hosts compromised by the PlugX malware. The French authorities, with the help of Europol, have launched on July 18, 2024, a “disinfection operation” to clean hosts infected with the PlugX…
USENIX Security ’23 – Bilingual Problems: Studying the Security Risks Incurred by Native Extensions in Scripting Languages
Authors/Presenters:Cristian-Alexandru Staicu, Sazzadur Rahaman, Ágnes Kiss, Michael Backes Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and…
KnowBe4 Avoids Data Breach After Hiring North Korean Hacker
American cybersecurity firm KnowBe4 recently discovered that a new hire, brought on as a Principal Software Engineer, was actually a North Korean state actor. This individual attempted to install data-stealing malware on the company’s devices, but the threat was…
Japanischer Supermarkt kontrolliert das Lächeln der Angestellten mit KI
Eine japanische Supermarktkette setzt auf ein KI-System, das Mimik und Tonfall der Angestellten bewerten soll. Ziel sei es, ein standardisiertes Lächeln zu erreichen. Das sorgt für Diskussionen. Dieser Artikel wurde indexiert von t3n.de – Software & Entwicklung Lesen Sie den…
Eliminating the Last Mile Between Security Data and Decision Making
Once upon a time, when we used to have to go to physical stores to get the products we needed, there was no such thing as the retail “last mile”… The post Eliminating the Last Mile Between Security Data and…
Security Affairs Malware Newsletter – Round 4
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Play Ransomware Group’s New Linux Variant Targets ESXi, Shows Ties With Prolific Puma Fake Browser Updates Lead to BOINC Volunteer Computing…
Security Affairs newsletter Round 482 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Ukraine’s cyber operation…
Indian Govt Confirms BSNL User Data Breach
On Wednesday, July 24, Union Minister of State for Communications Chandra Shekar Pemmasani revealed the breach at state-owned telecom operator Bharat Sanchar Nigam Limited (BSNL) in the Lok Sabha. The breach occurred on May 20, the Minister stated in a…
Report: Spyware Maker’s Data Leak Exposes Malware Used on Windows, Mac, Android, and Chromebook Devices
A Minnesota-based spyware company has been hacked, exposing thousands of devices worldwide under its covert surveillance, TechCrunch has learned. A source familiar with the breach provided TechCrunch with files from the company’s servers, detailing device activity logs from phones, tablets,…
CyberCartel: Latest Banking Trojan Threat in Chrome Extensions
In recent years, Latin America (LATAM) has become a favourite target for threat actors, especially those attacking financial organizations. The recent report by Security Intelligence titled “Unveiling the Latest Banking Threats in LATAM,” explains the changing scenario of banking Trojans…
Cyber Heist: Rs 40 Crore Taken from IndusInd Bank
According to Maharashtra Cyber, which reported the recovery of 31.89 crores out of 40 crores allegedly fraudulently transferred from IndusInd Bank to 20 different mule accounts on Friday, the agency said. As a result of the fraud, more than…
CEO nachgeahmt: Ferrari entgeht raffiniertem KI-basierten Identitätsbetrug
Ferrari entging nur knapp einem raffinierten Deepfake-Betrug, der sich gegen einen seiner Topmanager richtete. (Cybercrime, KI) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen Artikel: CEO nachgeahmt: Ferrari entgeht raffiniertem KI-basierten Identitätsbetrug
The best laptop docking stations in 2024: Expert tested and reviewed
We tested some of the best laptop docking stations to clean up your workspace and make it more organized. This article has been indexed from Latest news Read the original article: The best laptop docking stations in 2024: Expert tested…
Artificial Intelligence in 2024
Major Cyber Threats Powered by AI Many have embraced artificial intelligence as a new paradigm, with some even going so far as to call it the “revolution of work.” Unfortunately,… The post Artificial Intelligence in 2024 appeared first on Cyber…
Apple may be cooking something big with its new Game Mode. Here are 3 things we know
A new and improved Game Mode is coming to iPhones and iPads later this year, and it’s bringing features that can turn your devices into veritable gaming handhelds. This article has been indexed from Latest news Read the original article:…
Whatsapp-Sicherheitslücke erlaubt Skript-Ausführung
Eine Sicherheitslücke in WhatsApp für Windows erlaubt das Versenden von Programm-Anhängen, die beim Öffnen direkt ohne Vorwarnung starten. Dieser Artikel wurde indexiert von heise Security Lesen Sie den originalen Artikel: Whatsapp-Sicherheitslücke erlaubt Skript-Ausführung
One of the best e-readers I’ve tested is an Android phone dupe that’s full of wonder
The Onyx Boox Palma, an Android-based e-reader that looks like a phone, is my new favorite travel companion. This article has been indexed from Latest news Read the original article: One of the best e-readers I’ve tested is an Android…
One of the best rugged Android phones I’ve tested is also one of the cheapest
The Oukitel WP35 is a durable Android with a marathon battery that outperforms other smartphones in its price point. And as a plus, it doesn’t look like a brick. This article has been indexed from Latest news Read the original…
ChatGPT schon 1983 vorhergesagt: Steve Jobs‘ überraschend zutreffende Zukunftsprognosen
In einer Rede von 1983 beschreibt Jobs, wie er sich damals die zukünftige Entwicklung des Computers vorstellte, geht aber auch auf eine Maschine ein, die stark an heutige KI-Modelle erinnert. Dieser Artikel wurde indexiert von t3n.de – Software & Entwicklung…