Security News

Chrome users – get an alert when extensions are in danger of falling into wrong hands
2024-03-07 19:45

Millions of Chrome users now have a way to guard against the threat of extension subversion, that is, if they don't mind installing yet another browser extension. As we reported last August, those who develop Chrome extensions that become popular often receive solicitations to sell their code or to partner with a third-party in order for the new owner or partner to insert dubious, scammy, or malicious code in the extension.

Possible China link to Change Healthcare ransomware attack
2024-03-07 18:30

A criminal claiming to be an ALPHV/BlackCat affiliate - the gang responsible for the widely disruptive Change Healthcare ransomware infection last month - may have ties to Chinese government-backed cybercrime syndicates. "Some of our HUMINT sources with direct contact to Notchy says it's high probability that Notchy is associated with China Nation-State groups," Menlo's threat intel team said in a report Wednesday.

Windows 10 KB5001716 update fails with 0x80070643 errors, how to fix
2024-03-07 18:00

Microsoft is pushing out a Windows 10 KB5001716 update used to improve Windows Update that is ironically failing to install, showing 0x80070643 errors. Titled 'KB5001716: Update for Windows Update Service components,' this update has been pushed out by Microsoft over the years when new functionality needs to be added to Windows Update.

MiTM phishing attack can let attackers unlock and steal a Tesla
2024-03-07 17:07

Researchers demonstrated how they could conduct a Man-in-the-Middle phishing attack to compromise Tesla accounts, unlocking cars, and starting them. The attack works on the latest Tesla app, version 4.30.6, and Tesla software version 11.1 2024.2.7.

Flipper Zero WiFi phishing attack can unlock and steal Tesla cars
2024-03-07 17:07

An easy phishing attack using a Flipper Zero device can lead to compromising Tesla accounts, unlocking cars, and starting them. The attack works on the latest Tesla app, version 4.30.6, and Tesla software version 11.1 2024.2.7.

Flipper Zero WiFi attack can unlock and steal Tesla cars
2024-03-07 17:07

An easy phishing attack using a Flipper Zero device can lead to compromising Tesla accounts, unlocking cars, and starting them. The attack works on the latest Tesla app, version 4.30.6, and Tesla software version 11.1 2024.2.7.

5 Best VPNs for Social Media in 2024 (Free & Paid VPNs)
2024-03-07 16:42

VPNs change your IP address location and encrypt your online traffic, letting your business make the most out of social media platforms without worrying about access challenges. In this article, we take a look at the five best VPNs for social media.

JetBrains TeamCity under attack by ransomware thugs after disclosure mess
2024-03-07 16:34

Security researchers are increasingly seeing active exploit attempts using the latest vulnerabilities in JetBrains' TeamCity that in some cases are leading to ransomware deployment. Christiaan Beek, senior director of threat analytics at Rapid7, noted on AttackerKB that both TeamCity vulnerabilities were spotted being exploited in the wild.

AnyCubic fixes exploited 3D printer zero day flaw with new firmware
2024-03-07 16:10

AnyCubic has released new Kobra 2 firmware to fix a zero-day vulnerability exploited last month to print security warnings on 3D printers worldwide. At the end of February, AnyCubic printer users began reporting that their Kobra 3D printers were hacked with a print job that warned their devices were vulnerable to a critical vulnerability.

Google engineer caught stealing AI tech secrets for Chinese firms
2024-03-07 14:56

The U.S. Department of Justice has announced the unsealing of an indictment against Linwei Ding, 38, a former software engineer at Google, suspected of stealing Google AI trade secrets for Chinese companies. The allegedly stolen trade secrets involve crucial technology underpinning Google's advanced supercomputing data centers, which are essential for training and hosting large AI models capable of processing nuanced language and generating intelligent responses.