Security News
The first moment in the fall, when there were thunderstorms rolling through and I downloaded real-time radar data and watched it on, you know, some painful old Macintosh, it was like, "Oh my this is going to be big!". Had thrown around various ideas, because he was like, "I'll start an ISP," and I'm like, "Not differentiated, not interesting, not a problem." [After] the first ad showed up , and I took a look at that and I went, "I know how this stuff works. That's optional. We should fix that."
Admins of on-premises Sage X3 ERP deployments should check they're not exposing the enterprise resource planning suite to the public internet in case they fall victim to an unauthenticated command execution vulnerability. The infosec outfit described in detail the flaws, calling them "Protocol-related issues involving remote administration of Sage X3.".
Hard drive giant Western Digital is urging users of its MyBook Live brand of network storage drives to disconnect them from the Internet, warning that malicious hackers are remotely wiping the drives using a critical flaw that can be triggered by anyone who knows the Internet address of an affected device. Earlier this week, Bleeping Computer and Ars Technica pointed to a heated discussion thread on Western Digital's user forum where many customers complained of finding their MyBook Live and MyBook Live Duo devices completely wiped of their data.
Western Digital has alerted customers to a critical bug on its My Book Live storage drives, warning them to disconnect the devices from the internet to protect the units from being remotely wiped. In an advisory, the storage firm said My Book Live and My Book Live Duo devices were being "Compromised through exploitation of a remote command execution vulnerability" CVE-2018-18472.
Windows 11 has officially signed the death sentence for Internet Explorer as it will be disabled when users upgrade to the new operating system. In the announcement, Microsoft states that Internet Explorer will be disabled in Windows 11 as Microsoft Edge now includes the IE Mode feature.
Paul van Oorschot’s webpage contains a complete copy of his book: Computer Security and the Internet: Tools and Jewels. It’s worth reading.
Amazon will be launching the Amazon Sidewalk service on Tuesday that automatically opts-in your Echo and Ring devices into a new feature that shares your Internet with your neighbors. This service aims to provide Internet access to your neighbor's devices when their Internet goes down or to give access to Amazon devices roaming throughout a neighborhood.
WhatsApp on Wednesday fired a legal salvo against the Indian government to block new regulations that would require messaging apps to trace the "First originator" of messages shared on the platform, thus effectively breaking encryption protections. "Requiring messaging apps to 'trace' chats is the equivalent of asking us to keep a fingerprint of every single message sent on WhatsApp, which would break end-to-end encryption and fundamentally undermines people's right to privacy," a WhatsApp spokesperson told The Hacker News via email.
Microsoft has released the first Windows 10 build without the Internet Explorer web browser to Windows Insiders in the Dev Channel. As Microsoft announced on Wednesday, Internet Explorer 11 will be permanently retired from several Windows 10 versions and editions, and replaced with the Chromium-based Microsoft Edge in June 2022.
Microsoft is finally retiring Internet Explorer 11 from some Windows 10 versions and replacing it with the Chromium-based Microsoft Edge. "Microsoft Edge has Internet Explorer mode built in, so you can access those legacy Internet Explorer-based websites and applications straight from Microsoft Edge," said Sean Lyndersay, Microsoft Edge Partner Group Program Manager.