Security | PC Perspective

Rite Aid Customers Personal Data Stolen By RansomHub

Jeremy Hellstrom — Wed, 17 Jul 2024 16:51:50 +0000

Customers of Rite Aid are once again at risk, as the huge US drug store chain announces yet another security breach involving millions of customers. The chain has been in the news…

AT&T Ruins Friday For Many Customers

Jeremy Hellstrom — Fri, 12 Jul 2024 20:20:05 +0000

AT&T have disclosed a SnowFlake related breach which effects around 109 million customers, essentially everyone with an AT&T phone account. The breach contains data that hackers managed to collect from May…

RockYou2024! A 10 Billion Password Compilation Of Security Failures Greatest Hits

Jeremy Hellstrom — Mon, 08 Jul 2024 17:59:52 +0000

Have I Been Pwned is going to need to update their leaked passwords database and possibly invest in new hardware to search the almost 10 billion passwords recently uploaded, in plain…

More Fallout From ShinyHunters’ Breach of Ticketmaster

Jeremy Hellstrom — Fri, 05 Jul 2024 18:01:46 +0000

When details of the Ticketmaster were first revealed it was hard to feel bad for them; it's hard to name a company less deserving of our sympathy. However as more details emerged…

Insecurity Corner Bonanza! Intel, Linux, Cisco And Apple All Unwillingly Participate

Jeremy Hellstrom — Wed, 03 Jul 2024 17:37:35 +0000

This week has not been good for the sanity of system admins and knowledgeable users both, as there is hardly a system nor network that remains untouched by a new insecurity issues. …

Mistakes Were Made. One Group Found Responsible For Our CDN Nightmares

Jeremy Hellstrom — Fri, 28 Jun 2024 18:49:52 +0000

The recent attacks against customers of Polyfill.io, BootCDN, Bootcss, and Staticfile were a complete CDN nightmare this week, but there is some semi-good news for everyone. Thanks to eagle eyed security researchers,…

Android’s seccomp, Lying Snowblind In The Sun

Jeremy Hellstrom — Wed, 26 Jun 2024 17:56:09 +0000

If you are using an Android device then here's some good news, as of yet researchers have only ever spotted one specific app that has been modified by the new Snowblind vulnerability…

Is There An Outlook Bug Allowing You To Spoof Any Email Domain?

Jeremy Hellstrom — Wed, 19 Jun 2024 17:43:16 +0000

There may be a very disturbing Outlook bug which allows you to send emails that legitimately appear to be from any user@domain. The person who discovered this can only make it work…

Arm’s Memory Tagging Extensions Need A Helping Hand

Jeremy Hellstrom — Tue, 18 Jun 2024 19:06:39 +0000

We've been hearing a lot about speculative execution attacks, though until now it's generally referred to issues with Intel and AMD processors. Well, it seems Arm can join those two companies out…

It Was A Light Patch Tuesday, But One Addresses A 9.8

Jeremy Hellstrom — Wed, 12 Jun 2024 16:47:07 +0000

Another Patch Tuesday has come and gone, or at least it has if you rebooted to install the updates. You should probably get on that if you haven't already, as there is…

Beware Old Androids, Active Exploit On Bifrost and Valhall GPU Kernel Drivers

Jeremy Hellstrom — Tue, 11 Jun 2024 17:41:33 +0000

There was a a use-after-free vulnerability in version r41p0 of the Bifrost and Valhall GPU kernel driver, which was patched back in 2022. The problem is that when Arm releases a patch,…

A Mysterious DDoS Against The Internet Archive And 600,000 Dead ActionTec Routers

Jeremy Hellstrom — Fri, 31 May 2024 17:12:03 +0000

It's been an odd week with two major attacks reported, one ongoing and one from last year, with no one to claim responsibility for either. Starting on Sunday, the Internet Archive…

Microsoft Can Remember It for You Wholesale With Their New Built In Screen Logger

Jeremy Hellstrom — Wed, 22 May 2024 16:53:54 +0000

Today Microsoft announced Windows 11 Recall for Copilot+ PCs, billed as a handy way for you to recall information you've looked for using your PC. What it actually will be is…

QNAP’s Security Team Caught Napping

Jeremy Hellstrom — Tue, 21 May 2024 17:49:11 +0000

The QNAP QTS OS for their NAS devices is in the news, and not in a good way. Security researchers discovered 15 flaws between December 12, 2023, and January 23, 2024 and…

Illuminated Road Signs Can Be Good For Your Eyes; Bad For AIs

Jeremy Hellstrom — Mon, 13 May 2024 19:30:58 +0000

There is yet another reason to distrust self driving cars, adding to a long list of ways to fool sensors to force them to behave in unexpected ways. This one, which…

A Possibly Deadly Software Bug In Tandem Diabetes Care App

Jeremy Hellstrom — Fri, 10 May 2024 17:36:04 +0000

As our world is being taken over by smart devices the possibility of a software bug or virus causing the loss of life quickly grows. While losing control of your identity, money…

Trouble Over Device Fingerprinting Brewing On The Apple App Store?

Jeremy Hellstrom — Tue, 07 May 2024 17:27:37 +0000

Apple has recently started requiring anyone developing iOS apps to justify their use APIs that can be used for device fingerprinting. These include things like File timestamp APIs, System boot time…

Passkey Authentication Comes To Personal Microsoft Accounts

Jeremy Hellstrom — Fri, 03 May 2024 17:39:30 +0000

The first Thursday of May has now become World Password Day, perhaps not the most exciting annual event but one which more people should pay attention to. In recognition of the event…

Hackers Sharing Router Botnets, For Nefarious Purposes

Jeremy Hellstrom — Thu, 02 May 2024 19:28:31 +0000

Ars Technica has posted an article as interesting as it is depressing, giving you a look at the worst botnets on the net. Thanks to a lot of insecure routers and the…

Ban Bad Default Passwords On IoT Kit? Don’t Mind If You Do!

Jeremy Hellstrom — Mon, 29 Apr 2024 17:25:33 +0000

There are many frustrating things about how companies treat the security of the IoT kit they sell, and the UK is addressing two of the biggest. The first is the tendency to…