Huge cyberattack found hitting vulnerable Microsoft-signed legacy drivers to get past security

Check Point uncovers major hacking campaign, targeting hundreds of thousands of devicesThe campaign leveraged a vulnerable, but signed, Windows driverIt allowed crooks to disable antivirus programs and take over endpoints…

Continue Reading Huge cyberattack found hitting vulnerable Microsoft-signed legacy drivers to get past security

"We will not walk back" – Signal would rather leave the UK and Sweden than remove encryption protections

From the UK to Sweden, encrypted communications are increasingly under attack as authorities seek ways to better monitor people's chats to combat crime. Signal, one of the best encrypted messaging…

Continue Reading "We will not walk back" – Signal would rather leave the UK and Sweden than remove encryption protections

Apartment buildings broken into with phone in minutes — IoT-connected intercoms using default creds vulnerable to anyone with Google

A wide list of apartment complexes using IoT-connected intercoms still use the default logins from their manuals, making them easily accessible by bad actors. Source

Continue Reading Apartment buildings broken into with phone in minutes — IoT-connected intercoms using default creds vulnerable to anyone with Google

VSCode extensions pulled over security risks, but millions of users have already installed

Security researchers found malicious code hiding in two VSCode extensionsMicrosoft quickly pulled them and notifies usersThe developer criticized Microsoft's move, saying they were never consulted Microsoft has pulled two popular…

Continue Reading VSCode extensions pulled over security risks, but millions of users have already installed