What now? Ransomware victim pays hacker, but decryption key fails
Hazard ransomware is good at encrypting files, less so at decrypting them
Russia is willing to spend some $660 million to bolster internet censorship
The system mainly targets VPN services that Russians use to access the internet
Lawmakers ask FTC to determine if AI generated article summaries are anti-competitive
Data collection has never been as powerful or lucrative as it is right now
A hot potato: Currently, the AI industry is the Wild West. There are very few laws on the books that govern the market. This lack of formal regulation has led to AI firms operating on the honor system, promising to effectively self-regulate, but democrats in the US Senate believe the self-regulation experiment has failed. They're now asking trade regulators to see if they can find any antitrust violations, especially in AI-generated content summaries.
FBI says Americans lost $5.6 billion to crypto scams only in the last year
A 45% increase from 2022 from nearly 70,000 victim complaints
Two ex-Samsung executives arrested for stealing chip technology to build factory in China
The stolen technology has been valued at $3.2 billion
Major TSA security flaw exposed, simple SQL vulnerability could have allowed access to airplane cockpits
An attacker could have added fake pilots to the roster using SQL injection
Microsoft is trying to kill ActiveX controls in Office for good
In context: Microsoft introduced ActiveX in 1996 during Windows 95 days. So, in technological terms, it's ancient. Redmond designed it as a developer framework, allowing users to embed interactive objects into Windows applications and Internet Explorer. However, ActiveX eventually became a security threat that the tech giant's engineers are understandably trying to remove.
Researchers extract data from air-gapped PC by monitoring RAM's electromagnetic radiation
Effective up to 23 feet away
New Android malware uses OCR to steal crypto wallet keys from images
Researchers believe an iPhone version is also in the works
Analysis of thousands of channels reveals Telegram is flooded with criminal networks
Drug dealers, scammers, white nationalists, and toxic content thrive on the platform
Newly discovered flaw makes some YubiKeys vulnerable to cloning
All YubiKey models running firmware prior to version 5.7 are affected
Navy discovers hidden Starlink dish on US warship after spotting Wi-Fi network named "STINKY"
WTF?! Navy personnel deployed for months at sea miss certain creature comforts, including a reliable internet connection. Starlink, with its ability to connect just about anywhere on earth, including in the middle of the ocean, was too tempting for a group of chiefs to resist, so they illegally installed it as part of their preparations for a deployment. They were caught and prosecuted but the incident may also prompt a reevaluation of internet access policies on deployed vessels – or at least better safety protocols.
Zyxel issues patches for nine critical vulnerabilities affecting over 50 access points and routers
Admins: Update your Zyxel networking firmware ASAP
White House declares BGP security issues a national priority – BGP handles routing for the entire internet
The "glue" protocol that sticks internet's networks together
A Dangerous Network: The Border Gateway Protocol has been the primary routing technology for the internet for at least three decades. Like other fundamental internet protocols developed in the 1980s, BGP was not originally designed with security in mind – and it shows.
Zen Browser is a new browser based on Firefox with minimal data collection
Despite its early stage, Zen includes useful features like split view, a sidebar, and a compact mode for more screen real estate. It is compatible with most desktop operating systems, including older ones.
Columbus judge sues researcher for disclosing true impact of ransomware attack
As it turns out, local politicians had not told the city the truth
Researchers disclose Windows "downgrade" attack as Microsoft provides a mitigation method
A new Microsoft-signed revocation policy can block impacted VBS files and tighten UEFI security
Russia could target undersea cables and GPS to cripple Western communication, says NATO
Taking the threat very seriously
Tools of disruption: With no viable worldwide alternatives to the undersea cable and GPS networks, the West remains highly vulnerable if Russia opts to leverage these systems as bargaining chips or as a means of sabotage. NATO is taking the threat seriously and is setting up backups as geopolitical tensions with Russia remain high over the ongoing Ukraine conflict. Experts suggest even more needs to be done.
Pavel Durov charged in France for failure to moderate illegal content on Telegram
"It is absurd to claim that a platform, or its owner, are responsible for abuse of that platform."
China-linked hackers suspected of exploiting zero-day flaw in software used by ISPs
Attacks have been ongoing since June
RFID cards could turn into a global security mess after discovery of hardware backdoor
WTF?! Chinese-made chips used in popular contactless cards contain hardware backdoors that are easy to exploit. These chips are compatible with the proprietary Mifare protocol developed by Philips spin-off NXP Semiconductors and are inherently "intrinsically broken," regardless of the card's brand.
US files lawsuit against Georgia Tech over cybersecurity failures, lab admin opposed the use antivirus software
Federal lawsuit alleges non-compliance with DoD security protocols
Telegram CEO, Pavel Durov arrested at French airport following investigation into platform
The warrant is connected to the platform's alleged contributions to criminal activity including drug trafficking, pedocriminal offenses, and fraud
Former bank CEO sentenced to 24 years after being scammed into collapsing a bank
Some $47 million may never be recovered
Microsoft will try to resurrect Windows Recall AI this October
Following privacy concerns, the screen recording feature will debut for Windows Insiders