AI-assisted code can be inherently insecure, study finds
Programmers must be educated about strong coding practices
Researcher buys US military device containing sensitive biometric data for $68 from eBay
Don't leave memory cards in the devices you sell
New information-stealing malware is being spread by fake pirate sites
"Arrr, beware of RisePro, matey"
In a nutshell: In another showing of why downloading pirated software, games, movies, etc., can be riskier than it's worth, cybersecurity researchers have discovered a new information-stealing malware distributed through fake websites hosting pirated and other illegal content.
PSA: Reconsider your password manager options
After recent LastPass incidents, it might be time to consider other password manager options. Highly sought-after options include Bitwarden and KeePassXC, although there's a wider variety of choices that include the likes of Keeper, 1Password, Nordpass and Dashlane although not all of them are free.
LastPass breach: it's worse than initially thought
The August incident compromised some users' data, too
Madison Square Garden uses facial recognition against legal opponent
Company banned lawyers suing it from its venues, identifying them with facial recognition
The FBI advises users to install ad blockers
PSA: Ad blocking is perhaps one of the most controversial aspects of browsing the web today. Users agree that it declutters web pages, but they also deny ad revenue to many sites that need it (like TechSpot). However, law enforcement agencies admit that ad blocking also mitigates some security risks that online advertising introduces.
McGraw Hill breach exposed 22 terabytes of sensitive student data
Two unprotected S3 buckets contained troves of confidential information
Ransomware attacks are ongoing: a recap of major recent incidents, including this week's hit on The Guardian
What just happened? Despite IT security efforts worldwide, ransomware attacks show no sign of slowing down. Various organizations like technology manufacturers, the media, and governments have suffered major incidents this year. The latest and potentially last major attack in 2022 has struck the 201-year-old British newspaper.
Corsair says K100 keyboard's weird behavior is a bug, not a keylogger
A costly keyboard with a nasty surprise inside, or just a macro bug?
Nvidia releases security patch driver for older GeForce 600, 700 & Titan series
Nvidia has released a new driver update that addresses potential security issues for older GeForce GPUs that are no longer supported by Game Ready or Studio drivers.
Another critical, EternalBlue-like vulnerability threatens Windows machines worldwide
"Wormable" flaw could unleash the same chaos the world saw with WannaCry
Cybersecurity analysts find Fancy Bear sniffing around US satellite network
Fancier and more dangerous than a bear on drugs
Microsoft fixes Windows 11 22H2 gaming performance issues, restarts rollout
The update should reappear in Windows Update over the next few days
A ransomware gang used credentials from the Lapsus leak to sign malware
Group signed a kernel driver that disabled security software
Microsoft's Patch Tuesday squashes 49 bugs to end the year
Two zero-day and six critical vulnerabilities have been patched
Google introduces vulnerability scanner for open-source projects
A community database-backed tool for detecting dependency vulnerabilities
A clever trick turns antivirus software into unstoppable data wiping scourges
What just happened? Antivirus and anti-malware programs are supposed to be the most trusted type of software installed on a PC. Exploiting this well-known status quo, a security researcher created a data-wiping tool potentially capable of erasing all the data present on a system.
How to remove yourself from the internet
You can and should limit the data you put out there through your online activity
Europe's eIDAS 2.0: a threat to modern web security?
Revised European rules for digital certificates would be a downgrade
Cyberattack has kept an entire nation's government offline for over a month
Vanuatu's government won't say whether it was ransomware
TSA is ready for nationwide deployment of its facial recognition system
A hot potato: What started as a limited pilot project to test facial recognition technology could soon become the norm for screening and ID routines in all US airports. At least, that's what the Transportation Security Administration (TSA) is planning for next year.
FBI director: TikTok could be China's best espionage tool
Why it matters: Chris Wray has once again shared Washington's concerns over TikTok, an incredibly popular video app that could pose an unprecedented threat to US security. The issue is in the algorithm, and its permeability to the Communist Party's dystopian techno-control apparatus.
Android security defeated with stolen Platform certificates
Facepalm: Like any other modern operating system, Android's design employs a "privilege" based model. Such model is enforced by digital certificates, and it can become quite troublesome when the certificates are compromised somehow.
Hackers find a way to access your personal information and steal your car at the same time
All they need is your VIN, which is visible through your windshield