Technology

Dec 07, 2024The Hacker NewsEnterprise Security / Threat Prevention Cybercriminals know that privileged accounts are the keys to your kingdom. One compromised account can lead to stolen data, disrupted operations, and massive business losses. Even top organizations struggle to secure privileged accounts. Why? Traditional Privileged Access Management (PAM) solutions often fall short, leaving: Blind spots

Smartphone firms could move away from using flagship chipsets on their handsets and equip some models with a less powerful processor in 2025, according to a tipster. Instead of using the successor to the Snapdragon 8 Elite on their upcoming high-end smartphones, these companies are tipped to introduce certain models that are equipped with a

Dec 07, 2024Ravie LakshmananSupply Chain Attack / Cryptocurrency In yet another software supply chain attack, it has come to light that two versions of a popular Python artificial intelligence (AI) library named ultralytics were compromised to deliver a cryptocurrency miner. The versions, 8.3.41 and 8.3.42, have since been removed from the Python Package Index (PyPI)

A U.S. federal appeals court on Friday upheld a law requiring Chinese-based ByteDance to divest its popular short video app TikTok in the United States by early next year or face a ban. The decision is a major win for the Justice Department and opponents of the Chinese-owned app and a devastating blow to TikTok

Dec 06, 2024Ravie LakshmananArtificial Intelligence / Vulnerability Cybersecurity researchers have disclosed multiple security flaws impacting open-source machine learning (ML) tools and frameworks such as MLflow, H2O, PyTorch, and MLeap that could pave the way for code execution. The vulnerabilities, discovered by JFrog, are part of a broader collection of 22 security shortcomings the supply chain

OnePlus Watch 3 may soon be introduced as a successor to the OnePlus Watch 2, which was unveiled at MWC 2024 in February. The Watch 3 is tipped to launch in global markets, including in India, alongside the OnePlus 13 and OnePlus 13R handsets in January 2025. The purported smartwatch has yet to be officially confirmed. As

Dec 06, 2024Ravie LakshmananSpyware / Mobile Security A Russian programmer accused of donating money to Ukraine had his Android device secretly implanted with spyware by the Federal Security Service (FSB) after he was detained earlier this year. The findings come as part of a collaborative investigation by First Department and the University of Toronto’s Citizen

iOS 18.2 Release Candidate (RC) was rolled out by Apple to registered developers and public testers in beta on Thursday. RC updates are the final versions of beta software before it is released to the public. Hence, they do not include any new features but improve upon the existing ones introduced in previous updates. iOS

Dec 06, 2024The Hacker NewsMalware / Threat Intelligence The threat actor known as Gamaredon has been observed leveraging Cloudflare Tunnels as a tactic to conceal its staging infrastructure hosting a malware called GammaDrop. The activity is part of an ongoing spear-phishing campaign targeting Ukrainian entities since at least early 2024 that’s designed to drop the

Motorola Razr 50 Ultra and Edge 50 Neo are now available in a new colour option. The company has announced that the two handsets will be available in Mocha Mousse, the Pantone Colour of the Year 2025. The new variants will have similar specifications and features as the existing options. The Motorola Razr 50 Ultra comes with

Dec 05, 2024Ravie LakshmananCryptocurrency / Mobile Security As many as 77 banking institutions, cryptocurrency exchanges, and national organizations have become the target of a newly discovered Android remote access trojan (RAT) called DroidBot. “DroidBot is a modern RAT that combines hidden VNC and overlay attack techniques with spyware-like capabilities, such as keylogging and user interface

Google DeepMind unveiled the successor to the Genie artificial intelligence (AI) model, which could generate endless 2D game worlds, on Wednesday. Dubbed Genie 2, the new AI model is capable of generating unique action-controllable, playable 3D environments based on a single image prompt. Calling Genie 2 an AI “world model”, the company stated that it

Dec 05, 2024Ravie LakshmananCryptocurrency / Financial Crime The U.K. National Crime Agency (NCA) on Wednesday announced that it led an international investigation to disrupt Russian money laundering networks that were found to facilitate serious and organized crime across the U.K., the Middle East, Russia, and South America. The effort, codenamed Operation Destabilise, has resulted in

Xreal One series augmented reality (AR) glasses were launched on Wednesday. The latest lineup from the Chinese startup comes with a new X1 independent spatial computing chip that is claimed to provide complete spatial screen control. Two models have been unveiled as part of Xreal’s latest AR glass lineup — Xreal One and One Pro.

The Russia-linked advanced persistent threat (APT) group known as Turla has been linked to a previously undocumented campaign that involved infiltrating the command-and-control (C2) servers of a Pakistan-based hacking group named Storm-0156 to conduct its own operations since 2022. The activity, first observed in December 2022, is the latest instance of the nation-state adversary “embedding

iPhone 17 Pro and iPhone 17 Pro Max aren’t expected to launch until the second half of 2025, if Apple’s previous launch timelines are any indication. It has only been a couple of months since the iPhone 16 series was released, but details of Apple’s next generation of smartphones have already begun to surface online.

Dec 04, 2024Ravie Lakshmanan A joint advisory issued by Australia, Canada, New Zealand, and the U.S. has warned of a broad cyber espionage campaign undertaken by People’s Republic of China (PRC)-affiliated threat actors targeting telecommunications providers. “Identified exploitations or compromises associated with these threat actors’ activity align with existing weaknesses associated with victim infrastructure; no

Lenovo Yoga Pad Pro AI (2024) was launched in China on Tuesday as the company’s latest tablet model with artificial intelligence (AI) features. It is powered by a Snapdragon 8 Gen 3 chipset and has 16GB of RAM and 512GB of inbuilt storage. The Yoga Pad Pro AI (2024) also features a large 12.7-inch display

Dec 03, 2024Ravie LakshmananVulnerability / Network Security Cisco on Monday updated an advisory to warn customers of active exploitation of a decade-old security flaw impacting its Adaptive Security Appliance (ASA). The vulnerability, tracked as CVE-2014-2120 (CVSS score: 4.3), concerns a case of insufficient input validation in ASA’s WebVPN login page that could allow an unauthenticated,

Apple has been accused in a new lawsuit of illegally monitoring its workers’ personal devices and iCloud accounts while also barring them from discussing their pay and working conditions. The complaint filed in California state court on Sunday by Amar Bhakta, who works in digital advertising for Apple, claims the company requires employees to install