Tag: security

Gmail servers hijacked by malicious PyPI packages to spread havoc – here’s how to stay safe

Socket found seven malicious packages on PyPI The packages were abusing Gmail and WebSocket They were removed from the platform Several malicious PyPI packages were recently observed abusing Gmail to exfiltrate stolen sensitive data and communicate with their operators. Cybersecurity researchers Socket, who found the packages, reported them to the…

Read More

TeleMessage, the Signal-esque app used by the Trump administration, has been hacked

Hacker claims they broke into messaging service TeleMessage TeleMessage is a clone of Signal, a popular privacy-oriented chat app used by the likes of JD Vance Hacker stole some files from the platform, but no US government data was taken TeleMessage, an instant communications app used by some US Government…

Read More

Largest bank in the world issues stark security warning about technology that billions use every single day

JPMorganChase open letter calls for urgent industry-wide action on SaaS risks Third-party SaaS models expose critical infrastructure to cascading cybersecurity threats Firms rely on insecure integrations that collapse trust boundaries between systems JPMorganChase, the largest bank in the world, has warned about the dangers of SaaS technology used by organizations…

Read More

Asking remote job candidates this shocking question could save your company big bucks, security expert says

North Korean agents use AI to apply for remote tech jobs Simple questions about Kim Jong Un instantly derail their job interviews Laptop farms and deepfakes help agents bypass remote hiring defenses At the recent RSA Conference in San Francisco, security experts raised the alarm over a growing and increasingly…

Read More

US DOD wants right-to-repair provisions in Army contracts to access tools, software, and technical data without IP constraints

Many military contracts include provisions that don’t allow US Army to repair its own equipment This may change thanks to a new transformation strategy Both Republicans and Democrats have argued for the right to repair Shockingly, under past procurement contracts, the US Army hasn’t always held the right to repair…

Read More

Hacker pleads guilty to illegally accessing Disney Slack channels and stealing huge tranche of data

Hacker pleads guilty to accessing confidential Disney files Disney’s private Slack channels were breached in the attack The leak led Disney to switch from Slack to Microsoft Teams A Santa Clara man who created an AI image generation tool that deployed hidden malware has pleaded guilty to stealing over 1.1…

Read More