Tech

Safari and iOS users: Your browsing activity is being leaked in real time

Enlarge (credit: Getty Images) For the past four months, Apple’s iOS and iPadOS devices and Safari browser have violated one of the Internet’s most sacrosanct security policies. The violation results from a bug that leaks user identities and browsing activity within real time. The same-origin policy is a foundational security mechanism that forbids documents, scripts, […]

Tech

Microsoft warns of destructive disk wiper targeting Ukraine

Enlarge (credit: Getty Images) Over the past few months, geopolitical tensions have escalated as Russia amassed tens of thousands of troops along Ukraine’s border and made subtle but far-reaching threats if Ukraine and NATO don’t agree to Kremlin demands. Now, a similar dispute is playing out in cyber arenas, as unknown hackers late last week […]

Tech

Backdoor for Windows, macOS, and Linux went undetected until now

Enlarge (credit: Jeremy Brooks / Flickr) Researchers have uncovered a never-before-seen backdoor written from scratch for systems running Windows, macOS, or Linux that remained undetected by virtually all malware scanning engines. Researchers from security firm Intezer said they discovered SysJoker—the name they gave the backdoor—on the Linux-based Webserver of a “leading educational institution.” As the […]

Tech

North Korean hackers stole nearly $400 million in crypto last year

Enlarge The past year saw a breathtaking rise in the value of cryptocurrencies like Bitcoin and Ethereum, with Bitcoin gaining 60 percent in value in 2021 and Ethereum spiking 80 percent. So perhaps it’s no surprise that the relentless North Korean hackers who feed off that booming crypto economy had a very good year as […]

Tech

Russia says it has neutralized the cutthroat REvil ransomware gang

Enlarge (credit: Getty Images ) Russian law enforcement authorities said on Friday that they have arrested 14 people associated with REvil, a top ransomware group that has disrupted critical operations of wealthy targets and held their data hostage. The action, carried out by Russia’s FSB, the successor agency to the particular KGB, is a rare […]

Tech

Ukraine says government websites hit by “massive cyber attack”

Enlarge / A Ukrainian Military Forces serviceman watches through a spyglass in a trench on the frontline with Russia-backed separatists near Avdiivka, southeastern Ukraine, upon January 9, 2022. (credit: Anatolii Stepanov | Getty Images) Ukraine said it was the target of a “massive cyber attack” after about 70 government websites ceased functioning. On Friday morning […]

Tech

New Chrome security measure aims to curtail an entire class of Web attack

Enlarge (credit: Getty Images) For more than a decade, the Internet has remained vulnerable to a class of attacks that uses browsers as a beachhead for accessing routers and other sensitive devices on a targeted network. Now, Google is finally doing something about it. Starting in Chrome version 98, the browser will begin relaying requests […]

Tech

FOSS developer who nuked his apps embraced QAnon theory involving Aaron Swartz

Enlarge (credit: James Brey / iStockPhoto / Getty Images ) The developer who sabotaged two of his own open source code libraries, causing disruptions for thousands of apps that used them, has a colorful past that includes embracing a QAnon theory involving Aaron Swartz, the well-known hacktivist and programmer that died by suicide in 2013. […]

Tech

Patch systems vulnerable to critical Log4j flaws, UK and US officials warn

Enlarge (credit: Getty Images) Criminals are actively exploiting the high-severity Log4Shell vulnerability on servers running VMware Horizon in an attempt to install malware that allows them to gain full control of affected systems, the UK’s publicly funded healthcare system is warning. CVE-2021-44228 is one associated with the most severe vulnerabilities to come to light in […]

Tech

5 months on, Apple has yet to fix iOS bug that sends devices into a crash spiral

Enlarge (credit: Getty Images) Apple has been taking its time fixing an iOS bug that makes it easy for miscreants to completely disable an iOS device unless the victim performs a factory restore and follows other cumbersome steps, a researcher said. HomeKit is an Apple-designed communication protocol that allows people to use their iPhones or […]