Security News > 2024 > May

Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines
2024-05-16 10:12

Security researchers have disclosed almost a dozen security flaws impacting the GE HealthCare Vivid Ultrasound product family that could be exploited by malicious actors to tamper with patient...

Does a VPN Slow Down Your Internet Speed?
2024-05-16 10:09

More bluntly - do VPNs slow down your internet? Do they have a significant impact on overall stability and connectivity? What factors influence your internet speed while using a VPN? We'll answer these questions and more below! Quality VPNs will typically slow down your internet speed only by around 10-20%, if at all.

NCSC CTO: Broken market must be fixed to usher in new tech
2024-05-16 09:33

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Google fixes third exploited Chrome zero-day in a week (CVE-2024-4947)
2024-05-16 08:49

For the third time in the last seven days, Google has fixed a Chrome zero-day vulnerability for which an exploit exists in the wild.While the two Chrome zero days fixed in the past few days have been attributed to an anonymous researcher, this time around the reporters are known: Kaspersky threat researchers Vasiliy Berdnikov and Boris Larin.

Is an open-source AI vulnerability next?
2024-05-16 05:30

Let's explore why open-source AI security is lacking and what security professionals can do to improve it. First, it's essential to acknowledge that AI is not something different from software; it is software.

OWASP dep-scan: Open-source security and risk audit tool
2024-05-16 05:00

OWASP dep-scan is an open-source security and risk assessment tool that leverages information on vulnerabilities, advisories, and licensing restrictions for project dependencies. Depscan utilizes cdxgen to produce Software Bill-of-Materials, which allows us to support many different languages and source code configurations.

Ebury botnet compromises 400,000+ Linux servers
2024-05-16 04:30

In many cases, Ebury operators could gain full access to large servers of ISPs and well-known hosting providers. "We have documented cases where the infrastructure of hosting providers was compromised by Ebury. In these cases, we have seen Ebury being deployed on servers rented out by those providers, with no warning to the lessees. This resulted in cases where the Ebury actors were able to compromise thousands of servers at once," says Marc-Etienne M. Léveillé, the ESET researcher who investigated Ebury for more than a decade.

Product showcase: Block ads, cookie pop-ups, trackers with CleanWeb
2024-05-16 04:00

By eliminating intrusive ads, trackers, and cookie notifications, CleanWeb ensures a smoother, faster, and more enjoyable browsing experience that no longer comes at the cost of personal privacy. CleanWeb is part of Surfshark VPN. CleanWeb is one of many additional features you get with Surfshark VPN. It comes with a VPN subscription at no extra cost and can be accessed via a browser extension or the app.

Cloud security incidents make organizations turn to AI-powered prevention
2024-05-16 03:30

Cloud security incidents are alarmingly on the rise, with 61% of organizations reporting breaches within the last year, marking a significant increase from 24% the year before, according to Check...

Cybercriminals Exploiting Microsoft’s Quick Assist Feature in Ransomware Attacks
2024-05-16 03:16

The Microsoft Threat Intelligence team said it has observed a threat it tracks under the name Storm-1811 abusing the client management tool Quick Assist to target users in social engineering...