Zyxel firewalls affected by two new security flaws, patches must be installed ASAP
The critical vulnerabilities can be abused for remote code execution or DoS attacks
Microsoft and global intelligence agencies warn of Chinese state hackers infecting US critical infrastructure
China is preparing for future crises involving the US
Google reveals bug bounty program for its own Android apps like Chrome, Gmail and the search widget
The company paid $12 million to security researchers in 2022
Researchers discover brute-force attack that can bypass Android phone fingerprint locks
It doesn't work on iOS devices
Apple urges users to upgrade their devices immediately to patch three 'active' zero day exploits
The security patch was deployed using Apple's new Rapid Security Response automatic update system
Asus apologizes after bad router update causes widespread issues
A corrupted definition file resulted in network connectivity breaks
Montana has banned TikTok for everyone in the state
You won't find it on any app stores in the state as of next year
A former Apple engineer stole autonomous driving secrets and sold them to China, the DoJ says
Cupertino's Project Titan now a victim of Beijing's ruthless spying tactics?
Google's new registered domains include .zip and .mov for a more "exciting" and insecure internet
Researchers are debating how the new domains will affect web security and users' habits
Watch out for sneaky ChatGPT scams in Google Play and Apple's App Store
Most AI chatbots for mobile devices are fleeceware to be avoided
Chinese state hackers are infecting TP-Link routers with custom, malicious firmware
The ATP actors are exploiting home / SOHO routers for covert attacks
Microsoft can open and scan password-protected Zip archives in the cloud
In Redmond's cloud, no one can hear you say 'privacy'
A new bipartisan bill wants to improve cybersecurity of the US voting system
Providing some good old pentesting to those insecure voting machines
Privacy and civil rights groups warn against rapidly growing mass-surveillance network
The Fusus platform uses public and private cameras to create a real-time surveillance network
Millions of Android phones come with pre-installed malware, and there's no easy fix
A hot potato: The Google Play Store is notorious for harboring apps that contain malware, adware, or some flavor of spyware or fleeceware. A lesser-known fact is that hackers are increasingly targeting pre-installed apps for their misdeeds, and researchers are trying to raise awareness about this growing trend. Millions of affordable Android phones come with numerous pre-installed apps, and hackers only need to subvert one. However, addressing this issue is significantly more challenging than dealing with rogue apps that find their way into the Play Store.
Toyota accidentally exposed millions of customers' data for nearly a decade
Toyota apologized for the data exposure
Former Ubiquiti engineer sentenced to six years for stealing company data, attempted extortion
The "unsanctioned security drill" excuse didn't work
Microsoft fixes 38 flaws, including 3 zero-day vulnerabilities, with Patch Tuesday update
A lighter Patch Tuesday, but some rather nasty 0-day flaws exploited by cyber-criminals
Microsoft releases optional fix for actively exploited Secure Boot vulnerability
Why it matters: Microsoft has issued guidance for fixing a serious Secure Boot vulnerability that affects all Windows systems and is actively being exploited in the wild. Normally, this kind of issue would be patched via monthly servicing updates but the Redmond company has chosen a phased approach to reduce the risk of you or your organization ending up with devices that won't boot. The fix will require some manual steps for now, but will be applied automatically on all supported Windows systems starting next year.
Roku expands smart home lineup with $99 alarm system
Save even more with self-monitoring
Examination of 18 antivirus programs shows Microsoft Defender has the highest system load
See which ones received perfect scores
Def Con convention to host thousands of white hat hackers put against generative AI
Red team exercises will seek bugs, biases and hallucinations in large language models
FBI seizes 13 more domains for offering DDoS-for-hire services
The agency had shut down 48 platforms over similar charges last year