Security News > 2022

Being one of the 1% sucks if you're a Rackspace user
2022-12-22 00:35

As the Rackspace email fiasco approaches week three with the company's hosted Exchange customers' data in limbo, Rackspace execs still won't put an exact number on how many customers were affected by the ransomware-induced email outage, or when - if - they'll be able to recover their old messages and contacts. When asked for an exact customer count, "It's 1 percent of our overall company revenue," Rackspace Chief Product Officer Josh Prewitt told The Register, confirming a figure from an earlier filing with the US Securities and Exchange.

Samsung and Google fix Microsoft Intune Android 13 enrollment issue
2022-12-21 22:44

Microsoft has confirmed today that Samsung and Google have fixed an Intune enrollment issue affecting Galaxy S22 smartphones running Android 13. On affected S22 devices, Android users cannot complete enrollment if they create a Work Profile for Bring Your Own Device provisioning.

Corsair keyboard bug makes it type on its own, no malware involved
2022-12-21 21:47

Corsair has confirmed that a bug in the firmware of K100 keyboards, and not malware, is behind previously entered text being auto-typed into applications days later. The company's statement comes after multiple K100 users have reported that their keyboards are typing text on their own at random moments.

Zerobot malware now spreads by exploiting Apache vulnerabilities
2022-12-21 21:10

The Zerobot botnet has been upgraded to infect new devices by exploiting security vulnerabilities affecting Internet-exposed and unpatched Apache servers. Zerobot has been under active development since at least November, with new versions adding new modules and features to expand the botnet's attack vectors and make it easier to infect new devices, including firewalls, routers, and cameras.

FCC proposes record-breaking $300 million fine against robocaller
2022-12-21 20:07

The U.S. Federal Communications Commission proposed today a record-breaking $300 million fine against an auto warranty robocall operation that made billions of calls to more than 550 million phones across the United States. Today's announcement follows previous action taken by the FCC in July when the federal government agency ordered 8 U.S.-based voice service providers to stop offering their services to the operation behind these auto warranty scam robocalls within 48 hours.

“Suspicious login” scammers up their game – take care at Christmas
2022-12-21 19:59

If you follow this advice, you might jump to the dangerous conclusion that the site must surely know your real password, and must therefore be genuine, given that it seems to know that you put in the wrong password. Of course, the crooks can safely pretend you got your password wrong the first time, even if you didn't.

Microsoft fixes Hyper-V VM problem caused by Patch Tuesday
2022-12-21 19:30

Microsoft has pushed out an emergency fix for a problem in Windows Server caused by patch updates that made it impossible for some organizations to create virtual machines on Hyper-V hosts. The issue arose after Windows Server 2019 and Windows Server 2022 users installed two updates that were part of this month's Patch Tuesday releases.

Russians hacked JFK airport’s taxi dispatch system for profit
2022-12-21 18:29

Two U.S. citizens were arrested for allegedly conspiring with Russian hackers to hack the John F. Kennedy International Airport taxi dispatch system to move specific taxis to the front of the queue in exchange for a $10 fee. The taxi dispatch system is a computer-controlled system that ensures that taxis are dispatched from the airport's holding lot to pick up the next available fare at the appropriate terminal.

Turbocharge your IT career with this cybersecurity skills training for only $50
2022-12-21 16:31

Whether you want to develop advanced cybersecurity skills for your own business or advance your existing tech career, you'd benefit from the self-paced courses in the affordable Complete 2022 CompTIA Cyber Security & PenTest Super Bundle. CompTIA certifications are well-respected around the world and can really make your resume stand out when applying for the best positions.

What is Microsoft’s Secure Supply Chain Consumption Framework, and why should I use it?
2022-12-21 16:17

Software development isn't only about code; more importantly, it's driven by a set of best practices and guidelines that help us write better and more secure software. Like all large software companies, Microsoft has developed its own set of policies and procedures to implement approaches like its Secure Software Development Lifecycle.