Technology

Mar 29, 2024The Hacker NewsPen Testing / Regulatory Compliance Network penetration testing plays a vital role in detecting vulnerabilities that can be exploited. The current method of performing pen testing is pricey, leading many companies to undertake it only when necessary, usually once a year for their compliance requirements. This manual approach often misses opportunities
0 Comments
If you’re looking for a budget smartwatch we’ve handpicked some of the best deals and offers that are available on Croma right now. These affordable smartwatches can help you track your daily activities while mirroring notifications from your smartphone, making life easier for you. Croma has something for everyone, at just about every budget. Noise
0 Comments
Mar 29, 2024NewsroomNetwork Security / IoT Security A botnet previously considered to be rendered inert has been observed enslaving end-of-life (EoL) small home/small office (SOHO) routers and IoT devices to fuel a criminal proxy service called Faceless. “TheMoon, which emerged in 2014, has been operating quietly while growing to over 40,000 bots from 88 countries
0 Comments
Mar 30, 2024NewsroomLinux / Supply Chain Attack RedHat on Friday released an “urgent security alert” warning that two versions of a popular data compression library called XZ Utils (previously LZMA Utils) have been backdoored with malicious code designed to allow unauthorized remote access. The software supply chain compromise, tracked as CVE-2024-3094, has a CVSS score
0 Comments
HyperOS — Xiaomi’s new skin for Android smartphones — has been rolled out to several eligible smartphone models since the update was released in the country at the end of February. The company has now announced the next phase of the HyperOS update to eligible Xiaomi and Redmi smartphones and tablets in the country. The Chinese
0 Comments
Mar 30, 2024NewsroomMalware / Cryptocurrency Malicious ads and bogus websites are acting as a conduit to deliver two different stealer malware, including Atomic Stealer, targeting Apple macOS users. The ongoing infostealer attacks targeting macOS users may have adopted different methods to compromise victims’ Macs, but operate with the end goal of stealing sensitive data, Jamf
0 Comments
Mar 29, 2024NewsroomReverse Engineering / RFID Security Security vulnerabilities discovered in Dormakaba’s Saflok electronic RFID locks used in hotels could be weaponized by threat actors to forge keycards and stealthily slip into locked rooms. The shortcomings have been collectively named Unsaflok by researchers Lennert Wouters, Ian Carroll, rqu, BusesCanFly, Sam Curry, sshell, and Will Caruana.
0 Comments
Mar 29, 2024NewsroomSupply Chain Attack / Threat Intelligence The maintainers of the Python Package Index (PyPI) repository briefly suspended new user sign-ups following an influx of malicious projects uploaded as part of a typosquatting campaign. PyPI said “new project creation and new user registration” was temporarily halted to mitigate what it said was a “malware
0 Comments
Apple released the Vision Pro last month and the Cupertino-based tech giant seems to have shifted its focus to developing foldable smartphones after its first mixed-reality headset went on sale in the US. A new supply-chain report from Korea claims that the launch of Apple’s first, long-rumoured foldable iPhone has been pushed to 2027. This corroborates recent leaks that
0 Comments
Mar 28, 2024NewsroomLinux / Network Security A Linux version of a multi-platform backdoor called DinodasRAT has been detected in the wild targeting China, Taiwan, Turkey, and Uzbekistan, new findings from Kaspersky reveal. DinodasRAT, also known as XDealer, is a C++-based malware that offers the ability to harvest a wide range of sensitive data from compromised
0 Comments
Mar 28, 2024NewsroomTechnology / Data Privacy In June 2017, a study of more than 3,000 Massachusetts Institute of Technology (MIT) students published by the National Bureau for Economic Research (NBER) found that 98% of them were willing to give away their friends’ email addresses in exchange for free pizza. “Whereas people say they care about
0 Comments
Intel launched its AI PC Acceleration Program in October 2023 to connect independent hardware and software vendors with the company’s resources. On Tuesday, the company announced two more initiatives under the umbrella programme. The first initiative is called the AI PC Developer Program which is aimed at software developers, and a separate initiative for independent
0 Comments
Mar 27, 2024NewsroomCyber Espionage / Data Breach Indian government entities and energy companies have been targeted by unknown threat actors with an aim to deliver a modified version of an open-source information stealer malware called HackBrowserData and exfiltrate sensitive information in some cases by using Slack as command-and-control (C2). “The information stealer was delivered via
0 Comments
Fire-Boltt Oracle smartwatch has been launched in India. Previously, the company unveiled the Fire-Boltt Dream wristphone with a 2.02-inch screen. The Oracle model comes with a slightly smaller screen but shares otherwise similar features. It operates on an Android-based UI and supports several Google Play store applications while also being compatible with both Android and
0 Comments
Mar 27, 2024NewsroomVulnerability / Cybercrime A new phishing campaign has been observed leveraging a novel loader malware to deliver an information stealer and keylogger called Agent Tesla. Trustwave SpiderLabs said it identified a phishing email bearing this attack chain on March 8, 2024. The message masquerades as a bank payment notification, urging the user to
0 Comments