Security News

Undocumented backdoor found in Bluetooth chip used by a billion devices
2025-03-08 16:12

The ubiquitous ESP32 microchip made by Chinese manufacturer Espressif and used by over 1 billion units as of 2023 contains an undocumented backdoor that could be leveraged for attacks. [...]

Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access
2025-03-06 09:57

Over 1,000 websites powered by WordPress have been infected with a third-party JavaScript code that injects four separate backdoors. "Creating four backdoors facilitates the attackers having...

Apple drags UK government to court over 'backdoor' order
2025-03-05 14:38

A first-of-its-kind legal challenge set to be heard this month, per reports Apple has reportedly filed a legal complaint with the UK's Investigatory Powers Tribunal (IPT) contesting the UK...

Chinese APT Lotus Panda Targets Governments With New Sagerunex Backdoor Variants
2025-03-05 11:03

The threat actor known as Lotus Panda has been observed targeting government, manufacturing, telecommunications, and media sectors in the Philippines, Vietnam, Hong Kong, and Taiwan with updated...

Why a push for encryption backdoors is a global security risk
2025-03-04 05:30

Governments in the UK, US, and Europe are pressuring tech companies to weaken encryption in the name of security. The latest push from the UK government demanding Apple create a backdoor to...

Governments can't seem to stop asking for secret backdoors
2025-03-03 09:30

Cut off one head and 100 grow back? Decapitation may not be the way to go Opinion With Apple pulling the plug on at-rest end-to-end encryption (E2EE) for UK users, and Signal threatening to pull...

UK Demanded Apple Add a Backdoor to iCloud
2025-02-26 12:07

Last month, the UK government demanded that Apple weaken the security of iCloud for users worldwide. On Friday, Apple took steps to comply for users in the United Kingdom. But the British law is...

New Auto-Color Linux backdoor targets North American govts, universities
2025-02-25 17:51

A previously undocumented Linux backdoor dubbed 'Auto-Color' was observed in attacks between November and December 2024, targeting universities and government organizations in North America and Asia. [...]

Rather than add a backdoor, Apple decides to kill iCloud encryption for UK peeps
2025-02-24 03:31

Plus: SEC launches new crypto crime unit; Phishing toolkit upgraded; and more Infosec in brief Apple has responded to the UK government's demand for access to its customers’ data stored in iCloud...

Apple Drops iCloud's Advanced Data Protection in the U.K. Amid Encryption Backdoor Demands
2025-02-21 16:15

Apple is removing its Advanced Data Protection (ADP) feature for iCloud from the United Kingdom with immediate effect following government demands for backdoor access to encrypted user data. The...