Enlarge / DeSnake is back, with big promises about keeping AlphaBay up and running this time. (credit: Illustration: Elena Lacey | Getty Images) Just over four years ago, the US Department of Justice announced the takedown of AlphaBay, the biggest dark web market bust in history. Thai police arrested the site’s 26-year-old administrator, Alexandre Cazes, […]
Tag: Biz & IT
Three iOS 0-days revealed by researcher frustrated with Apple’s bug bounty
Enlarge / Pseudonymous researcher illusionofchaos joins a growing legion of security researchers frustrated with Apple’s slow response and inconsistent policy adherence when it comes to security flaws. (credit: Aurich Lawson | Getty Images) Yesterday, a security researcher who goes by illusionofchaos dropped public notice of three zero-day vulnerabilities in Apple’s iOS mobile operating system. The […]
Exchange/Outlook autodiscover bug exposed 100,000+ email passwords
Enlarge / If you own the right domain, you can intercept hundreds of thousands of innocent third parties’ email credentials, just by operating a standard webserver. (credit: Guardicore) Security researcher Amit Serper of Guardicore discovered a severe flaw in Microsoft’s autodiscover—the protocol which allows automagical configuration of an email account with only the address and […]
Semiconductor firms can’t find enough workers, worsening chip shortage
Enlarge / Don’t expect cheaper chips anytime soon. (credit: Tommy/Getty Images) The semiconductor chip shortage that has so vexed the auto industry looks set to continue for quite some time, according to a new industry survey . More than half of the companies that were surveyed by IPC said they expected the lack to last […]
Security audit raises severe warnings on Chinese smartphone models
Enlarge / Be sure you know what you’re getting into before buying and using unfamiliarly branded smartphones—especially international models not originally intended for your country. (credit: Clover No. 7 Photography via Getty Images) The Lithuanian National Cyber Security Centre (NCSC) recently published a security assessment of three recent-model Chinese-made smartphones—Huawei’s P40 5G, Xiaomi’s Mi 10T […]
Canadian VoIP provider hit by DDoS attack, phone calls disrupted
Enlarge (credit: Icons8 Team) Quebec-based provider of telephony services VoIP.ms is facing an aggressive Distributed Denial of Service (DDoS) cyber attack, causing a disruption in phone calls and services. The incident began around September 16 and has put a strain on the VoIP provider’s systems, websites, and operations. VoIP.ms serves over 80,000 customers across 125 countries, […]
Unpatched macOS vulnerability lets remote attackers execute code
Enlarge (credit: Dmitry Chernyshov) A code execution bug in Apple’s macOS allows remote attackers to run arbitrary commands on your device. And the worst part is, Apple hasn’t fully patched it yet, as tested by Ars. Those shortcut files can take over your Mac Independent security researcher Park Minchan has discovered a vulnerability in the […]
Linux Foundation says companies are desperate for open source talent
Enlarge / It probably shouldn’t be considered “surprising” when a Linux certification entity reports that Linux certifications are highly desirable. (credit: Linux Foundation) The Linux Foundation released its 2021 Open Source Jobs Report this month, which aims to inform both sides of the IT hiring process about current trends. The report accurately foreshadows many of […]
Ransomware victims panicked while FBI secretly held REvil decryption key
Enlarge / The seal of the Federal Bureau of Investigation (FBI) is seen at the J. Edgar Hoover building in Washington, D.C. (credit: Andrew Harrer/Bloomberg) For three weeks during the REvil ransomeware attack this summer, the FBI secretly withheld the key that would have decrypted data and computers on up to 1,500 networks, including those […]
$5.9 million ransomware attack on farming co-op may cause food shortage
Enlarge (credit: Raphael Rychetsky) Iowa-based provider of agriculture services NEW Cooperative Inc. has been hit by a ransomware attack, forcing it to take its systems offline. The BlackMatter group that is behind the attack has put forth a $5.9 million ransom demand. The farming cooperative is seen stating the attack could significantly impact the public supply […]