Uncategorized

Actively exploited vulnerability threatens hundreds of solar power stations

Enlarge (credit: Getty Images) Hundreds of Internet-exposed devices inside solar farms remain unpatched against a critical and actively exploited vulnerability that makes it easy for remote attackers to disrupt operations or gain a…

336,000 servers remain unpatched against critical Fortigate vulnerability

Enlarge Researchers say that nearly 336,000 devices exposed to the Internet remain vulnerable to a critical vulnerability in firewalls sold by Fortinet because admins have yet to install patches the company released three…

Torrent of image-based phishing emails are harder to detect and more convincing

Enlarge / Man hand holding a mobile phone with QR code. (credit: Getty Images) Phishing mongers have released a torrent of image-based junk emails that embed QR codes into their bodies to successfully…

TSMC says some of its data was swept up in a hack on a hardware supplier

Enlarge (credit: Getty Images) Chipmaker TSMC said on Friday that one of its hardware suppliers experienced a “security incident” that allowed the attackers to obtain configurations and settings for some of the servers…

Red Hat’s new source code policy and the intense pushback, explained

Enlarge / A be-hatted person, tipping his brim to the endless amount of text generated by the conflict of corporate versus enthusiast understandings of the GPL. (credit: Getty Images) When CentOS announced in…

Op-ed: Why the great #TwitterMigration didn’t quite pan out

Enlarge / Let's look deep within. (credit: Aurich Lawson | Getty Images) I've been using fediverse stuff (Mastodon and, most recently, Calckey—I'm just going to use "Mastodon" as shorthand here; purists can bite…

Fears grow of deepfake ID scams following Progress hack

Enlarge / The number of deepfakes used in scams in just the first three months of 2023 outstripped all of 2022. (credit: FT Montage/Getty Images) When Progress Corp, the Massachusetts-based maker of business…

Brave aims to curb practice of websites that port scan visitors

Enlarge The Brave browser will take action against websites that snoop on visitors by scanning their open Internet ports or accessing other network resources that can expose personal information. Starting in version 1.54,…

Prominent cryptocurrency exchange infected with previously unseen Mac malware

Enlarge (credit: Getty Images) Researchers have discovered previously unknown Mac malware infecting a cryptocurrency exchange. It contains a full suite of capabilities, including the ability to steal private data and download and execute…

Casualties keep growing in this month’s mass exploitation of MOVEit 0-day

Enlarge (credit: Getty Images) The dramatic fallout continues in the mass exploitation of a critical vulnerability in a widely used file-transfer program, with at least three new victims coming to light in the…