Category: security

Sony confirms data breach impacting thousands of workers

Sony has confirmed reports that sensitive data from current and former employees had been stolen by outside forces. In a breach notification letter sent out to affected individuals, Sony said that hackers leveraged a flaw in the MOVEit managed file transfer software to steal sensitive personal information belonging to them,…

Read More

Thousands of industrial systems, including power grids and traffic lights, found exposed online

Hundreds of thousands of industrial control systems (ICS) are connected to the public internet and accessible to hackers, researchers have claimed. Hackers can then test these endpoints for different vulnerabilities, and if they find any – exploit them for significant gain (financial or otherwise).  This is according to a new…

Read More

Okta and Yubico team up to offer easy passwordless authentication for your firm

Yubico has launched FIDO Pre-reg, a feature which the company claims will improve the uptake of passwordless authentication. Making the announcement at Oktane 23, the security key vendor will be partnering with identity management firm Okta to deliver the new feature for YubiKeys purchased via a YubiEnterprise Subscription. Yubico also…

Read More

Dashlane and NordPass now support passkeys on Android 14

Dashlane and NordPass have both announced that they will be supporting passkeys on the newly-released Android 14 mobile operating system. The news follows hot the heels of both password manager‘s previous announcements to support passkeys on iOS 17 for iPhone, which began rolling out to users in September. Now mobile…

Read More

Hackers exploit several security flaws in top Qualcomm GPUs

Not long after ARM disclosed multiple severe security vulnerabilities in some of its GPU products, Qualcomm has now done the same.  In both cases, the company was tipped off to the existence of the flaw by Google’s Threat Analysis Group (TAG), and Project Zero group. Qualcomm’s flaws were found in…

Read More

North Korean hackers are targeting aerospace – Lazarus Group tricks employees into installing malware themselves

A famous cybercriminal group known for its links to the North Korean regime has continued its spree of recent attacks by targeting an unnamed Spanish aerospace company. Lazarus, notably known for its 2017 WannaCry attack, have been adapting and evolving their methods of attack. This latest attack is a variant…

Read More