Technology

Amazfit has announced multiple offers on its smartwatches that will be live during the upcoming Amazon Prime Day sale. During the sale, which runs on July 21-22, buyers can get discounts of up to 55 percent on smartwatches such as Amazfit Active, Amazfit Balance, and Amazfit Edge. This announcement comes amidst a report that the

Jul 12, 2024NewsroomMalware / Cyber Attack Cybersecurity researchers have shed light on a short-lived DarkGate malware campaign that leveraged Samba file shares to initiate the infections. Palo Alto Networks Unit 42 said the activity spanned the months of March and April 2024, with the infection chains using servers running public-facing Samba file shares hosting Visual

Apple received approval for its Near Field Communication (NFC) technology in Europe on Thursday. The European Union (EU) formally announced the approval after the Cupertino-based tech giant agreed to make changes that were suggested by the bloc. The company first applied for approval in 2022, however, the EU expressed concerns due to Apple’s monopoly over

Jul 12, 2024NewsroomCyber Crime / Online Safety Two Russian-born Australian citizens have been arrested and charged in the country for spying on behalf of Russia as part of a “complex” law enforcement operation codenamed BURGAZADA. This includes a 40-year-old woman, an Australian Defence Force (ADF) Army Private, and her husband, a 62-year-old self-employed laborer. Media

Honor Magic Vs 3 was unveiled in China on Friday as the latest book-style foldable smartphone from Honor. It is equipped with a Snapdragon 8 Gen 2 SoC and is offered in three colour options. The Honor Magic Vs 3 comes with a slim profile; depending on the colour variant, the phone measures 9.7mm in

Jul 11, 2024NewsroomVulnerability / Enterprise Security Palo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an authentication bypass. Cataloged as CVE-2024-5910 (CVSS score: 9.3), the vulnerability has been described as a case of missing authentication in its Expedition migration tool that

Delhi Metro Rail Corporation (DMRC) expanded its Digital QR Ticketing service to Amazon Pay on Thursday. With this move, Delhi Metro commuters can purchase their travelling tickets online through the platform. The QR code-based ticketing facility was already available via several other apps, but now travellers have an additional way to book their one-way tickets.

Jul 11, 2024NewsroomCyber Espionage / Network Security The China-linked advanced persistent threat (APT) group codenamed APT41 is suspected to be using an “advanced and upgraded version” of a known malware called StealthVector to deliver a previously undocumented backdoor dubbed MoonWalk. The new variant of StealthVector – which is also referred to as DUSTPAN – has

Wear OS 5 – the latest operating system developed by Google for smartwatches – will no longer support older watch faces on the Play Store, the company announced on Wednesday. The incompatible watch faces include those not developed using WFF (Watch Face Format). Notably, the Samsung Galaxy Watch 7 and Galaxy Watch Ultra, launched at

Jul 10, 2024NewsroomData Breach / Malware A now-patched security flaw in Veeam Backup & Replication software is being exploited by a nascent ransomware operation known as EstateRansomware. Singapore-headquartered Group-IB, which discovered the threat actor in early April 2024, said the modus operandi involved the exploitation of CVE-2023-27532 (CVSS score: 7.5) to carry out the malicious

Spotify for Podcasters – the all-in-one podcasting platform – introduced a new ‘Comments’ feature on Tuesday. This interactive feature is said to allow listeners to post comments on podcasts and receive replies from podcasters, enabling more engagement. Alongside Comments, the app has also been revamped and it now delivers real-time performance updates for podcasts alongside

The Problem The “2024 Attack Intelligence Report” from the staff at Rapid7 [1] is a well-researched, well-written report that is worthy of careful study. Some key takeaways are:  53% of the over 30 new vulnerabilities that were widely exploited in 2023 and at the start of 2024 were zero-days. More mass compromise events arose from

Samsung Galaxy Buds 3 and Galaxy Buds 3 Pro were unveiled at the Galaxy Unpacked event held in Paris today (July 10). Samsung’s latest generation of truly wireless stereo (TWS) earphones resemble Apple’s AirPods with stems and Blade Lights marking a big departure from the company’s previous design language. They come with an active noise cancellation

Jul 09, 2024NewsroomCI/CD Security / Server Security Cybersecurity researchers have found that it’s possible for attackers to weaponize improperly configured Jenkins Script Console instances to further criminal activities such as cryptocurrency mining. “Misconfigurations such as improperly set up authentication mechanisms expose the ‘/script’ endpoint to attackers,” Trend Micro’s Shubham Singh and Sunil Bharti said in

WhatsApp on Tuesday began rolling out a new feature that is designed to improve the safety of its group messaging features. The Meta-owned messaging platform will now display contextual information to users when they are added to a group by an unknown user. The feature is designed to provide WhatsApp users with relevant information about

Jul 09, 2024NewsroomVulnerability / Network Security Cybersecurity researchers have discovered a security vulnerability in the RADIUS network authentication protocol called BlastRADIUS that could be exploited by an attacker to stage Mallory-in-the-middle (MitM) attacks and bypass integrity checks under certain circumstances. “The RADIUS protocol allows certain Access-Request messages to have no integrity or authentication checks,” InkBridge

Samsung is holding its annual Galaxy Unpacked event, where it will introduce the next generation of foldables. The company has already confirmed that it will be introducing Galaxy Z Fold 6 and Galaxy Z Flip 6 smartphones during the launch event alongside Galaxy Watch 7 and Buds 3 during the launch event. The Samsung Unpacked

Jul 08, 2024NewsroomCyber Espionage / Cloud Security A previously undocumented advanced persistent threat (APT) group dubbed CloudSorcerer has been observed targeting Russian government entities by leveraging cloud services for command-and-control (C2) and data exfiltration. Cybersecurity firm Kaspersky, which discovered the activity in May 2024, the tradecraft adopted by the threat actor bears similarities with that

Apple Watch Series 10 might feature a display that is much larger than the company’s current generation model, according to Bloomberg’s Mark Gurman. The smartwatch is expected to debut later this year as the successor to the Series 9 model that was unveiled in in 2023, and might not arrive with previously reported changes, such

Jul 08, 2024The Hacker NewsCybersecurity / Enterprise Security Events like the recent massive CDK ransomware attack – which shuttered car dealerships across the U.S. in late June 2024 – barely raise public eyebrows anymore. Yet businesses, and the people that lead them, are justifiably jittery. Every CISO knows that cybersecurity is an increasingly hot topic