Security News

Feds finally decide to do something about years-old SS7 spy holes in phone networks
2024-04-02 23:17

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Microsoft warns Gmail blocks some Outlook email as spam, shares fix
2024-04-02 22:09

Microsoft has confirmed that some Outlook.com users are experiencing issues with emails being blocked and marked as spam when trying to email Gmail accounts. Until the Outlook.com Team can address this newly acknowledged issue, Microsoft advises impacted users to add an Outlook.com alias to their accounts and email Gmail contacts using that alias.

Winnti's new UNAPIMON tool hides malware from security software
2024-04-02 21:59

The Chinese 'Winnti' hacking group was found using a previously undocumented malware called UNAPIMON to let malicous processes run without being detected. UNAPIMON is a C++ malware delivered in DLL form, which uses Microsoft Detours for hooking the CreateProcessW API function, allowing it to unhook critical API functions in child processes.

3 UK Cyber Security Trends to Watch in 2024
2024-04-02 21:03

Staying up to date with the latest in cyber security has arguably never been more paramount than in 2024. TechRepublic consulted U.K. industry experts to identify the three most significant trends in cyber security - AI, zero days and IoT security - and provide guidance as to how businesses can best hold their fort.

Omni Hotels experiencing nationwide IT outage since Friday
2024-04-02 19:59

Omni Hotels & Resorts has been experiencing a chain-wide outage that brought down its IT systems on Friday, impacting reservation, hotel room door lock, and point-of-sale systems. The hotel chain's phone helpline is also down, with a recorded message saying, "Thank you for calling Omni Hotels and Resorts. We are sorry we are currently experiencing technical difficulties and are unable to answer your call. Please try your call again at a later time."

xz Utils Backdoor
2024-04-02 18:50

Malicious code added to xz Utils versions 5.6.0 and 5.6.1 modified the way the software functions. Anyone in possession of a predetermined encryption key could stash any code of their choice in an SSH login certificate, upload it, and execute it on the backdoored device.

OWASP server blunder exposes decade of resumes
2024-04-02 18:30

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

New Chrome feature aims to stop hackers from using stolen cookies
2024-04-02 18:08

Google announced a new Chrome security feature that ties cookies to a specific device, blocking hackers from stealing and using them to hijack users' accounts.To solve this problem, Google is working on a new feature called Device Bound Session Credentials that makes it impossible for attackers to steal your cookies by cryptographically binding your authentication cookies to your device.

Google agrees to delete Chrome browsing data of 136 million users
2024-04-02 17:07

Google has agreed to delete billions of data records collected from 136 million Chrome users in the United States, as part of a lawsuit settlement regarding alleged undisclosed browser data collection while in Incognito mode. Key elements of the Settlement include changes to Google's disclosures regarding its data collection practices, the deletion of billions of data records, implementing measures to curb the future accumulation of personal information, and eliminating mechanisms that enabled the tracking of users in Incognito mode without their knowledge.

Declassified NSA Newsletters
2024-04-02 17:05

Applied Cryptography, for those who don't read the internet news, is a book written by Bruce Schneier last year. Schneier has gathered academic research, internet gossip, and everything he could find on cryptography into one 600-page jumble.