Technology

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published a catalog of vulnerabilities, including from Apple, Cisco, Microsoft, and Google, that have known exploits and are being actively exploited by malicious cyber actors, in addition to requiring federal agencies to prioritize applying patches for those security flaws within “aggressive” timeframes. “These vulnerabilities pose significant
0 Comments
Xiaomi on Friday, November 5 announced a new technology called the Loop LiquidCool that is says will ensure efficient cooling of smartphone processors. The heat dissipation method introduced by the Chinese smartphone giant is claimed to separate hot air and cooling liquid circulations that lower heat convention issues on mobile phones. Inspired by cooling systems
0 Comments
Ukraine’s premier law enforcement and counterintelligence agency on Thursday disclosed the real identities of five individuals allegedly involved in cyberattacks attributed to a cyber-espionage group named Gamaredon, linking the members to Russia’s Federal Security Service (FSB). Calling the hacker group “an FSB special project, which specifically targeted Ukraine,” the Security Service of Ukraine (SSU) said
0 Comments
Cybersecurity researchers have disclosed a security flaw in the Linux Kernel’s Transparent Inter Process Communication (TIPC) module that could potentially be leveraged both locally as well as remotely to execute arbitrary code within the kernel and take control of vulnerable machines. The heap overflow vulnerability “can be exploited locally or remotely within a network to
0 Comments
The U.S. Commerce Department on Wednesday added four companies, including Israel-based spyware companies NSO Group and Candiru, to a list of entities engaging in “malicious cyber activities.” The agency said the two companies were added to the list based on evidence that “these entities developed and supplied spyware to foreign governments that used these tools
0 Comments
Amazon Music has started rolling out automatically generated, synchronised transcripts for select podcasts. The new experience is initially coming to the US for both Android and iOS users. It is also the first biggest podcast-focussed update after Amazon Music started serving podcasts through its platform last year. By offering auto-generated, synchronised transcripts, Amazon Music will
0 Comments
Google has rolled out its monthly security patches for Android with fixes for 39 flaws, including a zero-day vulnerability that it said is being actively exploited in the wild in limited, targeted attacks. Tracked as CVE-2021-1048, the zero-day bug is described as a use-after-free vulnerability in the kernel that can be exploited for local privilege
0 Comments
Battlegrounds Mobile India has announced that logins with Facebook accounts will be disabled from November 5. This change will only affect Android users for now. Game maker Krafton says that BGMI players who have been using the game through a Facebook login will need to have the Facebook app installed on their smartphone. If this
0 Comments
A now-patched critical remote code execution (RCE) vulnerability in GitLab’s web interface has been detected as actively exploited in the wild, cybersecurity researchers warn, rendering a large number of internet-facing GitLab instances susceptible to attacks. Tracked as CVE-2021-22205, the issue relates to an improper validation of user-provided images that results in arbitrary code execution. The
0 Comments
There is often confusion between Cloud Access Security Brokers (CASB) and SaaS Security Posture Management (SSPM) solutions, as both are designed to address security issues within SaaS applications. CASBs protect sensitive data by implementing multiple security policy enforcements to safeguard critical data. For identifying and classifying sensitive information, like Personally Identifiable Information (PII), Intellectual Property
0 Comments
Multiple vulnerabilities have been disclosed in Hitachi Vantara’s Pentaho Business Analytics software that could be abused by malicious actors to upload arbitrary data files and even execute arbitrary code on the underlying host system of the application. The security weaknesses were reported by researchers Alberto Favero from German cybersecurity firm Hawsec and Altion Malka from
0 Comments
Redmi Note 11 Pro+ teardown video has been released by Xiaomi sub-brand Redmi just days after officially launching the new phone under its Redmi Note 11 series. The teardown coverage clearly shows the internals of the new Redmi Note-series phone, including its triple rear cameras as well as JBL speakers. The Redmi Note 11 Pro+
0 Comments