Recent Security News
-
Three Chinese balloons float near Taiwanese airbase
January 4, 2024 at 05:24AM Chinese balloons were spotted over the Taiwan Strait and one crossed into Taiwanese airspace, raising concerns ahead of the January 13 elections. Last year a similar balloon was shot down in US airspace; suspicion arose when it was discovered to be using a US internet provider to transmit data to…
-
‘everything’ blocks devs from removing their own npm packages
January 4, 2024 at 04:56AM The npm package registry was flooded with over 3,000 packages during the holidays, leading to the creation of the “everything” package. Installing “everything” results in the download of every npm package, causing storage and performance issues. Authors are unable to remove their packages due to its dependency chain, which has…
-
UAC-0050 Group Using New Phishing Tactics to Distribute Remcos RAT
January 4, 2024 at 04:06AM The UAC-0050 threat actor is using phishing attacks to distribute the Remcos RAT, employing new tactics to avoid detection by security software. Uptycs researchers highlight the group’s use of a pipe method for interprocess communication, demonstrating advanced adaptability. The group has a history of targeting Ukrainian and Polish entities through…
-
Getting Started With Passkeys, One Service at a Time
January 4, 2024 at 12:08AM Passkeys, supported by major technology firms like Apple, Google, and Microsoft, aim to streamline and secure online authentication, addressing the vulnerabilities of traditional passwords. With over 7 billion potential users, passkeys provide an alternative to memorized passwords, leveraging device-based security and biometrics. Third-party providers and various ecosystems offer different approaches…