Security News

AWS, Google, and Azure CLI Tools Could Leak Credentials in Build Logs
2024-04-16 13:26

New cybersecurity research has found that command-line interface (CLI) tools from Amazon Web Services (AWS) and Google Cloud can expose sensitive credentials in build logs, posing significant...

New open-source project takeover attacks spotted, stymied
2024-04-16 13:07

"The OpenJS Foundation Cross Project Council received a suspicious series of emails with similar messages, bearing different names and overlapping GitHub-associated emails," OpenJS Foundation and Open Source Security Foundation leaders shared on Monday. "These emails implored OpenJS to take action to update one of its popular JavaScript projects to 'address any critical vulnerabilities,' yet cited no specifics. The email author(s) wanted OpenJS to designate them as a new maintainer of the project despite having little prior involvement."

Change Healthcare’s ransomware attack costs edge toward $1B so far
2024-04-16 12:50

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Private Internet Access VPN Review (2024): How Good is PIA VPN?
2024-04-16 12:00

Visit PIA VPN. Private Internet Access has been a long-time player in the VPN space. Key features of Private Internet Access VPN. PIA VPN comes with both industry-standard and unique VPN features for prospective VPN buyers.

Widely-Used PuTTY SSH Client Found Vulnerable to Key Recovery Attack
2024-04-16 11:14

The maintainers of the PuTTY Secure Shell (SSH) and Telnet client are alerting users of a critical vulnerability impacting versions from 0.68 through 0.80 that could be exploited to achieve full...

Identity in the Shadows: Shedding Light on Cybersecurity's Unseen Threats
2024-04-16 11:10

In today's rapidly evolving digital landscape, organizations face an increasingly complex array of cybersecurity threats. The proliferation of cloud services and remote work arrangements has...

X.com Automatically Changing Link Text but Not URLs
2024-04-16 11:00

Brian Krebs reported that X started automatically changing twitter.com links to x.com links. The problem is: it changed any domain name that ended with "Twitter.com," and it only changed the link's appearance, not the underlying URL. So if you were a clever phisher and registered fedetwitter.com, people would see the link as fedex.com, but it would send people to fedetwitter.com.

Google location tracking deal could be derailed by politics
2024-04-16 10:45

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Atlas VPN Review (Updated for 2024)
2024-04-16 09:36

Visit Atlas VPN. Atlas VPN has announced that it will "Sunset" its service on April 24, 2024 and migrate its users to NordVPN on the same day. On April 24, NordVPN - Atlas VPN's sister company - will gain all Atlas VPN paid subscribers for the remainder of their subscription period.

FTC Fines Mental Health Startup Cerebral $7 Million for Major Privacy Violations
2024-04-16 08:36

The U.S. Federal Trade Commission (FTC) has ordered the mental telehealth company Cerebral from using or disclosing personal data for advertising purposes. It has also been fined more than $7...