Mar 06, 2025Ravie LakshmananThreat Intelligence / Vulnerability The threat actors behind the Medusa ransomware have claimed nearly 400 victims since it first emerged in January 2023, with the financially motivated attacks witnessing a 42% increase…
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: Relion 670/650/SAM600-IO Vulnerability: Improper Handling of Insufficient Privileges 2. RISK EVALUATION Successful exploitation of this vulnerability could allow…
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: PCU400, PCULogger Vulnerabilities: Access of Resource Using Incompatible Type (‘Type Confusion’), NULL Pointer Dereference, Use After Free, Double…
The U.K. government appears to have quietly scrubbed encryption advice from government web pages, just weeks after demanding backdoor access to encrypted data stored on Apple’s cloud storage service, iCloud. The change was spotted by…
In many ways, the Apple C1—its first cellular modem—is the company’s most important product in years. Just as the company broke free from reliance on Intel with its own Mac processors, it is now breaking…
Mar 06, 2025Ravie LakshmananData Breach / Website Security Over 1,000 websites powered by WordPress have been infected with a third-party JavaScript code that injects four separate backdoors. “Creating four backdoors facilitates the attackers having multiple…
The MacBook Air, the iPad Air, the Mac Studio, and the iPad—Apple released new versions of these devices this week, and on this episode of the Macworld Podcast, we talk about what’s new, what’s not…
The U.S. Department of Justice (DoJ) has announced charges against 12 Chinese nationals for their alleged participation in a wide-ranging scheme designed to steal data and suppress free speech and dissent globally. The individuals include…
To many people, coding is about precision. It’s about telling a computer what to do and having the computer perform those actions exactly, precisely, and repeatedly. With the rise of AI tools like ChatGPT, it’s…
A Barcelona court ruled that the co-founders of spyware maker NSO Group, Omri Lavie and Shalev Hulio, and former executive of two affiliate companies Yuval Somekh, can be indicted as part of an investigation into…