The Biden administration is asking the world’s largest technology companies to publicly commit to tightening the digital security of their software and cloud services. The voluntary pledge, first reported by WIRED, represents the latest effort by the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) to build support …
Read More »Cyberspies Hacked Cisco Firewalls to Access Government Networks
Network security appliances like firewalls are meant to keep hackers out. Instead, digital intruders are increasingly targeting them as the weak link that lets them pillage the very systems those devices are meant to protect. In the case of one hacking campaign over recent months, Cisco is now revealing that …
Read More »The Mystery of ‘Jia Tan,’ the XZ Backdoor Mastermind
The scourge of software supply chain attacks—an increasingly common hacking technique that hides malicious code in a widely used legitimate program—can take many forms. Hackers can penetrate an update server to seed out their malware, or even break into the network where the software was developed to corrupt it at …
Read More »You Should Update Apple iOS and Google Chrome ASAP
It’s time to check your software updates. March has seen the release of important patches for Apple’s iOS, Google’s Chrome, and its privacy-conscious competitor Firefox. Bugs have also been squashed by enterprise software giants including Cisco, VMware, and SAP. Here’s what you need to know about the security updates issued …
Read More »Hackers Found a Way to Open Any of 3 Million Hotel Keycard Locks in Seconds
When thousands of security researchers descend on Las Vegas every August for what's come to be known as “hacker summer camp,” the back-to-back Black Hat and Defcon hacker conferences, it's a given that some of them will experiment with hacking the infrastructure of Vegas itself, the city's elaborate array of …
Read More »Here Are the Google and Microsoft Security Updates You Need Right Now
It’s the shortest month of the year, but February updates have been hitting the ground at lightning speed, with Microsoft, Ivanti, and Fortinet all patching zero-day flaws in their products. Zoom and Cisco also just squashed serious bugs, so it’s a good idea to check your software versions and update …
Read More »Apple and Google Just Patched Their First Zero-Day Flaws of the Year
It’s only a month into 2024, but Apple and Google have already patched their first zero-day flaws of the year. Enterprise firms are also gearing up for another year of bug squashing, with important fixes available from the likes of Cisco and SAP. So what are you waiting for? Read …
Read More »A Flaw in Millions of Apple, AMD, and Qualcomm GPUs Could Expose AI Data
As more companies ramp up development of artificial intelligence systems, they are increasingly turning to graphics processing unit (GPU) chips for the computing power they need to run large language models (LLMs) and to crunch data quickly at massive scale. Between video game processing and AI, demand for GPUs has …
Read More »Google Fixes Nearly 100 Android Security Issues
December was a hectic month for updates as firms including Apple and Google rushed to get patches out to fix serious flaws in their products before the holiday break. Enterprise software giants also issued their fair share of patches, with Atlassian and SAP squashing several critical bugs during December. Here’s …
Read More »Google Fixes a Seventh Zero-Day Flaw in Chrome—Update Now
The holiday season is here, but software firms are still busy issuing fixes for major security flaws. Microsoft, Google, and enterprise software firm Atlassian have released patches for vulnerabilities already being used in attacks. Cisco also patched a bug deemed so serious, it was given a near-maximum CVSS score of …
Read More »