Ubiquiti users report having access to others’ UniFi routers, cameras
HomeNewsSecurityUbiquiti users report having access to others’ UniFi routers, cameras 12/14/23 update with information from Ubiquiti added below. Since yesterday, users of Ubiquiti networking devices, ranging from routers to security cameras, have reported seeing other people’s devices and notifications through the company's UniFi cloud services. Ubiquiti is a popular networking device manufacture
Signal adds quantum-resistant encryption to its E2EE messaging protocol
HomeNewsSecuritySignal adds quantum-resistant encryption to its E2EE messaging protocol Signal has announced that it upgraded its end-to-end communication protocol to use quantum-resistant encryption keys to protect users from future attacks. Quantum computers that use qubits (superpositions of 0 and 1) have the potential to be much more powerful and faster than current systems, allowing them to p
New Inception attack leaks sensitive data from all AMD Zen CPUs
HomeNewsSecurityNew Inception attack leaks sensitive data from all AMD Zen CPUs Researchers have discovered a new and powerful transient execution attack called 'Inception' that can leak privileged secrets and data using unprivileged processes on all AMD Zen CPUs, including the latest models. Transient execution attacks exploit a feature present on all modern processors named speculative execution
PyTorch discloses malicious dependency chain compromise over holidays
HomeNewsSecurityPyTorch discloses malicious dependency chain compromise over holidays PyTorch has identified a malicious dependency with the same name as the framework's 'torchtriton' library. This has led to a successful compromise via the dependency confusion attack vector. PyTorch admins are warning users who installed PyTorch-nightly over the holidays to uninstall the framework and the counter
Lastpass: Hackers stole customer vault data in cloud storage breach
HomeNewsSecurityLastpass: Hackers stole customer vault data in cloud storage breach LastPass revealed today that attackers stole customer vault data after breaching its cloud storage earlier this year using information stolen during an August 2022 incident. This follows a previous update issued last month when the company's CEO, Karim Toubba, only said that the threat actor gained access to "certa
Okta's source code stolen after GitHub repositories hacked
Okta, a leading provider of authentication services and Identity and Access Management (IAM) solutions, says that its private GitHub repositories were hacked this month. According to a 'confidential' email notification sent by Okta and seen by BleepingComputer, the security incident involves threat actors stealing Okta's source code. Source code stolen, customer data not impacted BleepingComputer
Twilio breach let hackers gain access to Authy 2FA accounts
Twilio’s investigation into the attack on August 4 reveals that hackers gained access to some Authy user accounts and registered unauthorized devices. Authy is a two-factor authentication (2FA) service from Twilio that allows users to secure their online accounts where the feature is supported by identifying a second time via a dedicated app after typing in the login credentials. When logging into
FBI: Stolen PII and deepfakes used to apply for remote tech jobs
HomeNewsSecurityFBI: Stolen PII and deepfakes used to apply for remote tech jobs The Federal Bureau of Investigation (FBI) warns of increasing complaints that cybercriminals are using Americans' stolen Personally Identifiable Information (PII) and deepfakes to apply for remote work positions. Deepfakes (digital content like images, video, or audio) are sometimes generated using artificial intellig
Malicious PyPI package opens backdoors on Windows, Linux, and Macs
HomeNewsSecurityMalicious PyPI package opens backdoors on Windows, Linux, and Macs Yet another malicious Python package has been spotted in the PyPI registry performing supply chain attacks to drop Cobalt Strike beacons and backdoors on Windows, Linux, and macOS systems. PyPI is a repository of open-source packages that developers can use to share their work or benefit from the work of others, dow
GitHub suspends accounts of Russian devs at sanctioned companies
Russian software developers are reporting that their GitHub accounts are being suspended without warning if they work for or previously worked for companies under US sanctions. According to Russian media outlets, the ban wave began on April 13 and didn't discriminate between companies and individuals. For example, the GitHub accounts of Sberbank Technology, Sberbank AI Lab, and the Alfa Bank Labor
Microsoft's GitHub account hacked, private repositories stolen
The individual told us that they then downloaded 500GB of private projects and initially planned on selling it, but has now decided to leak it for free Based on the file stamps in full directory listing of the leaked files, the breach may have occurred on March 28th, 2020. Shiny Hunters told BleepingComputer that they no longer have access to Microsofts GitHub account. Private repositories leaked
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
City of Oakland systems offline after ransomware attack
Automotive fabric supplier TB Kawashima announces cyberattack
PyPi python packages caught sending stolen AWS keys to unsecured sites
Microsoft: June Windows Server updates may cause backup issues
Newly found zero-click iPhone exploit used in NSO spyware attacks
Have I Been Pwned adds 441K accounts stolen by RedLine malware
Apple silently fixes iOS zero-day, asks bug reporter to keep quiet
Apple will disable insecure TLS in future iOS, macOS releases