Tag: security
This security flaw could let hackers unlock hotel doors across the world by hijacking keycards
Security researchers have found a relatively easy and cheap way to clone the keycards used on three million Saflok electronic RFID locks in 13,000 hotels and homes all over the world. The keycard and lock manufacturer, Dormakaba, has been notified, and it is currently working to replace the vulnerable hardware…
Read More
Some Apple CPUs have an “unfixable” security flaw — and they’re leaking secret encryption keys
Researchers have discovered a new side-channel vulnerability in Apple’s M-series of processors that they claim could be used to extract secret keys from Mac devices when they’re performing cryptographic operations. Academic researchers from the University of Illinois Urbana-Champaign, University of Texas at Austin, Georgia Institute of Technology, University of California,…
Read More
AT&T denies leaked data of 70 million people is from its systems
A hacker is selling a huge archive on the dark web, claiming it originated from a 2021 data breach at American telecommunications giant AT&T – however the company denies the data originated from its servers. BleepingComputer reported a threat actor with the alias ShinyHunters posted an ad on the RaidForums…
Read More
US signs up more countries for its anti-spyware push
During its third Summit for Democracy held on March 18, 2024, the White House made a significant announcement confirming that six additional nations have pledged their support to an international coalition focused on countering commercial spyware. With the inclusion of Finland, Germany, Ireland, Japan, Poland, and the Republic of Korea,…
Read More
Another Microsoft vulnerability is being used to spread malware
Hackers are using a novel phishing technique to deliver remote access trojans (RAT) to unsuspecting victims. According to the report, published this Monday, threat actors are using a technique called Object Linking and Embedding (OLE). This is a Windows feature that allows users to embed and link documents within documents,…
Read More
Russian hacker group exploits Microsoft Windows feature in worldwide phishing attack
The infamous Russian hacking collective, known as APT28, is now using a legitimate Microsoft Windows feature to deploy infostealers and other malware to their victims. This is according to a new paper from IBM’s cybersecurity arm, X-Force, which claims the campaign has been active between November last year, and February…
Read More