Everything coming from Apple in September 2024
This is it, the biggest month of the year for Apple fans. September is when Apple releases new iPhones and Apple Watches, as well as the major updates to its operating systems that we’ve been…
Lenovo Yoga 9i 14 Gen 9 review: Punchy sound and OLED goodness
At a glance Expert’s Rating Pros Amazing speakers Included accessories Great display Cons Short on ports Cramped keyboard Our Verdict The Lenovo Yoga 9i 14 offers a gorgeous OLED display as well as punchy speakers.…
New Malware Masquerades as Palo Alto VPN Targeting Middle East Users
Aug 30, 2024Ravie LakshmananMalware / Network Security Cybersecurity researchers have disclosed a new campaign that potentially targets users in the Middle East through malware that disguises itself as Palo Alto Networks GlobalProtect virtual private network…
Breaking Down AD CS Vulnerabilities: Insights for InfoSec Professionals
The most dangerous vulnerability you’ve never heard of. In the world of cybersecurity, vulnerabilities are discovered so often, and at such a high rate, that it can be very difficult to keep up with. Some…
How to remove an item from Find My
The tiny AirTag tracker Apple introduced in 2021 provides a low-effort way to keep track of your stuff: a backpack, a wallet, a bike, a car, and even a pet. (You may need an AirTag case to…
North Korean Hackers Target Developers with Malicious npm Packages
Aug 30, 2024Ravie LakshmananCryptocurrency / Malware Threat actors with ties to North Korea have been observed publishing a set of malicious packages to the npm registry, indicating “coordinated and relentless” efforts to target developers with…
A Call to Action for Securing ICS/OT Environments
Aug 30, 2024The Hacker NewsICS Security / OT Security A comprehensive guide authored by Dean Parsons emphasizes the growing need for specialized ICS security measures in the face of rising cyber threats. With a staggering…
New Cyberattack Targets Chinese-Speaking Businesses with Cobalt Strike Payloads
Aug 30, 2024Ravie LakshmananCyber Espionage / Threat Intelligence Chinese-speaking users are the target of a “highly organized and sophisticated attack” campaign that is likely leveraging phishing emails to infect Windows systems with Cobalt Strike payloads.…
Atlassian Confluence Vulnerability Exploited in Crypto Mining Campaigns
Aug 30, 2024Ravie LakshmananCryptojacking / Vulnerability Threat actors are actively exploiting a now-patched, critical security flaw impacting the Atlassian Confluence Data Center and Confluence Server to conduct illicit cryptocurrency mining on susceptible instances. “The attacks…
Commercial spyware vendor exploits used by Kremlin-backed hackers, Google says
Getty Images Critics of spyware and exploit sellers have long warned that the advanced hacking sold by commercial surveillance vendors (CSVs) represents a worldwide danger because they inevitably find their way into the hands of…