Rite Aid Customers Personal Data Stolen By RansomHub
Customers of Rite Aid are once again at risk, as the huge US drug store chain announces yet another security breach involving millions of customers. The chain has been in the news…
Read More
Tag: Security
AT&T Ruins Friday For Many Customers
AT&T have disclosed a SnowFlake related breach which effects around 109 million customers, essentially everyone with an AT&T phone account. The breach contains data that hackers managed to collect from...
Read More
RockYou2024! A 10 Billion Password Compilation Of Security Failures Greatest Hits
Have I Been Pwned is going to need to update their leaked passwords database and possibly invest in new hardware to search the almost 10 billion passwords recently uploaded, in plain…
Read More
More Fallout From ShinyHunters’ Breach of Ticketmaster
When details of the Ticketmaster were first revealed it was hard to feel bad for them; it's hard to name a company less deserving of our sympathy. However as more details emerged…
Read More
Insecurity Corner Bonanza! Intel, Linux, Cisco And Apple All Unwillingly Participate
This week has not been good for the sanity of system admins and knowledgeable users both, as there is hardly a system nor network that remains untouched by a new insecurity issues. …
Read More
Mistakes Were Made. One Group Found Responsible For Our CDN Nightmares
The recent attacks against customers of Polyfill.io, BootCDN, Bootcss, and Staticfile were a complete CDN nightmare this week, but there is some semi-good news for everyone. Thanks to eagle eyed security researchers,…
Read More
Android’s seccomp, Lying Snowblind In The Sun
If you are using an Android device then here's some good news, as of yet researchers have only ever spotted one specific app that has been modified by the new Snowblind vulnerability…
Read More
Is There An Outlook Bug Allowing You To Spoof Any Email Domain?
There may be a very disturbing Outlook bug which allows you to send emails that legitimately appear to be from any user@domain. The person who discovered this can only make it work…
Read More
Arm’s Memory Tagging Extensions Need A Helping Hand
We've been hearing a lot about speculative execution attacks, though until now it's generally referred to issues with Intel and AMD processors. Well, it seems Arm can join those two companies out…
Read More
It Was A Light Patch Tuesday, But One Addresses A 9.8
Another Patch Tuesday has come and gone, or at least it has if you rebooted to install the updates. You should probably get on that if you haven't already, as there is…
Read More
Beware Old Androids, Active Exploit On Bifrost and Valhall GPU Kernel Drivers
There was a a use-after-free vulnerability in version r41p0 of the Bifrost and Valhall GPU kernel driver, which was patched back in 2022. The problem is that when Arm releases a patch,…
Read More
A Mysterious DDoS Against The Internet Archive And 600,000 Dead ActionTec Routers
It's been an odd week with two major attacks reported, one ongoing and one from last year, with no one to claim responsibility for either. Starting on Sunday, the Internet...
Read More
Microsoft Can Remember It for You Wholesale With Their New Built In Screen Logger
Today Microsoft announced Windows 11 Recall for Copilot+ PCs, billed as a handy way for you to recall information you've looked for using your PC. What it actually will be...
Read More
QNAP’s Security Team Caught Napping
The QNAP QTS OS for their NAS devices is in the news, and not in a good way. Security researchers discovered 15 flaws between December 12, 2023, and January 23, 2024 and…
Read More
Illuminated Road Signs Can Be Good For Your Eyes; Bad For AIs
There is yet another reason to distrust self driving cars, adding to a long list of ways to fool sensors to force them to behave in unexpected ways. This one, which…
Read More
A Possibly Deadly Software Bug In Tandem Diabetes Care App
As our world is being taken over by smart devices the possibility of a software bug or virus causing the loss of life quickly grows. While losing control of your identity, money…
Read More
Trouble Over Device Fingerprinting Brewing On The Apple App Store?
Apple has recently started requiring anyone developing iOS apps to justify their use APIs that can be used for device fingerprinting. These include things like File timestamp APIs, System boot...
Read More
Passkey Authentication Comes To Personal Microsoft Accounts
The first Thursday of May has now become World Password Day, perhaps not the most exciting annual event but one which more people should pay attention to. In recognition of the event…
Read More
