The iPhone 17 will be a step backward–again
Long-time readers of his column will know that the Macalope is not above grazing on low-hanging fruit. Far from it. First of all, who doesn’t like a nice piece of fruit? Second, it’s right there.…
4 Reasons Your SaaS Attack Surface Can No Longer be Ignored
What do identity risks, data security risks and third-party risks all have in common? They are all made much worse by SaaS sprawl. Every new SaaS account adds a new identity to secure, a new…
Illicit HuiOne Telegram Market Surpasses Hydra, Hits $24 Billion in Crypto Transactions
Jan 14, 2025Ravie LakshmananCryptocurrency / Online Scam The Telegram-based online marketplace known as HuiOne Guarantee and its vendors have cumulatively received at least $24 billion in cryptocurrency, dwarfing the now-defunct Hydra to become the largest…
Zero-Day Vulnerability Suspected in Attacks on Fortinet Firewalls with Exposed Interfaces
Jan 14, 2025Ravie LakshmananVulnerability / Network Security Threat hunters are calling attention to a new campaign that has targeted Fortinet FortiGate firewall devices with management interfaces exposed on the public internet. “The campaign involved unauthorized…
Russian-Linked Hackers Target Kazakhstan in Espionage Campaign with HATVIBE Malware
Russia-linked threat actors have been attributed to an ongoing cyber espionage campaign targeting Kazakhstan as part of the Kremlin’s efforts to gather economic and political intelligence in Central Asia. The campaign has been assessed to…
How Barcelona became an unlikely hub for spyware startups
Toward the end of 2023, an Israeli security researcher from Tel Aviv said that he was approached on LinkedIn with an opportunity to work abroad with “good pay.” He said that the company’s HR department…
CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active Attacks
Jan 14, 2025Ravie LakshmananVulnerability / Cybersecurity The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a second security flaw impacting BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products to the Known…
Hackers have devised a simple text scam to bypass Apple’s iPhone protections
The more we use our iPhones to chat, the more smishing (SMS phishing) attacks try to trick us into compromising our accounts. According to research by Bleeping Computer, the latest wave of attacks is simple…
Google Drive now synchronizes files faster and uses less data to do it
Google recently announced a new update to its Google Drive cloud storage service that will make it much faster to synchronize your local copy of files on your computer with those stored in the cloud.…
Researcher finds a vulnerability in the iPhone USB-C controller
A security researcher has been able to hack Apple’s USB-C controllers that are used in current iPhones, which would usually raise concerns about security and the ability to jailbreak the iPhone. But there’s probably nothing…