Tag: security
Chinese energy tech exports found to contain hidden comms and radio devices
Communication devices have been found in Chinese made solar inverters These have the potential to destabilase the power grid It’s unknown how many were found or the intent behind them Rogue communication devices have been discovered in Chinese made solar inverters, devices which play a ‘critical role’ in renewable energy…
Read More
Ivanti Neurons for ITSM could be targeted by authentication bypass flaw, so watch out
Ivanti released a patch for a critical severity flaw in Neurons for ITSM The flaw can be abused to gain admin rights on target systems There is no evidence of abuse in the wild Ivanti has patched a critical-severity vulnerability in its Neurons for ITSM IT service management solution, and…
Read More
Ivanti patches two zero-days that could lead to RCE in Endpoint Manager Mobile
Ivanti patched two flaws being chained to mount RCE attacks A “limited number” of companies were allegedly compromised Only on-prem products are affected Ivanti has released a patch for two vulnerabilities in its Endpoint Manager Mobile (EPMM) software, that’s allegedly being chained in remote code execution (RCE) attacks in the…
Read More
CPU microcode hack could infect processors with ransomware directly
A researcher from Rapid7 created a working Proof of Concept for a CPU ransomware Such a ransomware would persist on a device even after the hard drive had been replaced The PoC will (most likely) never see the light of day A security researcher wrote ransomware code that infects the…
Read More
Google to pay $1.4 billion in unauthorized biometric data collection and geo-tracking lawsuits
Google will pay its biggest ever state settlement over data privacy issues The company had been tracking users’ geolocation without consent It was also collecting biometrics and incognito searches Google has agreed to pay $1.375 billion to the state of Texas to settle lawsuits over unauthorized tracking and data collection.…
Read More
Criminals are targeting Bitcoin owners on Facebook with a multi-stage malware campaign – follow these steps to stay safe
Experts warn Facebook crypto ads now deliver malware through trusted brand impersonation Malware deploys only when victims meet specific browser or profile criteria Local server and PowerShell commands allow stealthy data exfiltration and control A new wave of malware attacks is targeting Bitcoin and crypto owners through Facebook ads that…
Read More