Security
Breaches, vulnerabilities, privacy and the people exploiting them.
Google says hackers are calling financial firm employees to hack and extort victims
Groups of hackers are breaking into large U.S. financial firms to steal sensitive data and extort victims, Google’s security researchers report.
China-linked LightSpy spyware caught targeting victims in 13 countries, including the US
Researchers linked the latest malicious activity to a Chinese company, after one of the spyware's operators placed an order with KFC using their real name and office address.
PSA: Apple has released security updates for Mac
Tahoe, Sequoia and Sonoma operating systems have been patched to address a Screen Sharing vulnerability.
Apple’s latest macOS updates address a serious Screen Sharing vulnerability
Apple has now published the security details for today’s macOS Tahoe, Sequoia, and Sonoma updates , revealing that all three address a serious Screen Sharing vulnerability. Here is what Apple fixed.
Apple releases security updates to macOS Tahoe, Sequoia, and Sonoma [U]
Update, 2:24 p.m. ET: Apple has now revealed that the updates address a Screen Sharing vulnerability. You can learn more about it here . The original story follows below. Apple rolled out macOS Sonoma 14.8.9, macOS…
Hacker pleads guilty to stealing data from more than 165 Snowflake customers
Connor Moucka pled guilty to hacking and stealing data from more than 165 Snowflake customers, which net him and his accomplices more than $2.5 million in ransom payments.
Security Bite: Apple’s baffling bug bounty changes finally make sense
9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform . Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and…
How to stop Roku from tracking everything you watch
Let's dive in to Roku's privacy policy to see what data is being collected from you -- and how to stop it.
OpenAI says Apple’s own security practices undermine its trade secrets case
Newly filed court exhibits show OpenAI’s legal strategy in Apple’s trade secrets lawsuit: argue that Apple’s own security and offboarding practices — including allowing an Apple manager to access a former engineer’s…
Biggest backdoor yet found in Chinese routers sold under multiple brand names
The most blatant security backdoor yet seen in an internet router has been found in a range of models sold under multiple brand names. A firmware implant phones home to cloud servers in China to ask for instructions,…
Windows 10 LTSC 2021 has five months before security updates cost extra
ESU meter starts running in January, unless you're on the IoT edition
Chinese router vendor denies its firmware contains backdoors – but pauses downloads to fix security issues anyway
It’s just a remote maintenance function, says Zbtlink
London cops handed victim's new address and number to her stalker, watchdog says
Met ordered to improve safeguards after two preventable data breaches
AI researchers let models off the leash – then watched as they tried to add malware to a FOSS project
Models used social engineering and collaborated among themselves to solve a security challenge
This one time, at Hacker Summer Camp …
What to expect as BSides, Black Hat, and DEF CON descend on Las Vegas
Feds get 3 days to patch N-able God mode flaw under active exploit
Experts warn hotfix not optional. MSPs warned attacker gains 'full administrative access to an N-central console'
AI helps Microsoft bug hunters chase a record $20M payday
Broader bounty rules added to a swelling volume of machine-assisted vulnerability reports
No, Apple Photos face recognition is not a privacy threat – quite the opposite
We learned yesterday that a judge is allowing a $32B lawsuit to proceed , alleging that Apple Photos face recognition violates a state privacy law. It has been conflated with Meta’s use of face recognition, despite the…
Apple caps security bug reports amid surge in AI-generated findings
As it grapples with a surge in “AI slop” security reports, Apple has recently made changes to its bug bounty program. Here are the details.