Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits

October 8, 2024 at 12:42AM Qualcomm has released security updates addressing around 20 vulnerabilities in proprietary and open-source components. Among them, CVE-2024-43047 is a high-severity user-after-free bug in the DSP Service, under active exploitation. CVE-2024-33066, a critical flaw in WLAN Resource Manager, has also been patched. The updates aim to mitigate potential targeted exploitation and … Read more

Kaspersky Exits U.S., Automatically Replaces Software With UltraAV, Raising Concerns

September 24, 2024 at 09:00AM Kaspersky has started withdrawing its offerings in the U.S., transitioning users to UltraAV before its formal exit at the end of September. While the company ensured a seamless transition to maintain protection, some users reported unexpected automatic deletion of Kaspersky’s software. UltraAV claimed to have communicated the transition process to … Read more

BlackCloak Raises $17 Million to Protect Executives, High-Profile Individuals

September 17, 2024 at 09:15AM Cybersecurity and privacy firm BlackCloak recently raised $17 million in a Series B funding round, bringing its total investment to over $30 million. The funding was led by Baird Capital with additional support from Blue Heron Capital, TDF Ventures, and TechOperators. The Florida-based company provides personal protection against cyber threats … Read more

Pavel Durov Criticizes Outdated Laws After Arrest Over Telegram Criminal Activity

September 6, 2024 at 01:39AM Telegram CEO Paul Durov broke his silence after his arrest in France, addressing charges of enabling criminal activity on the platform. He criticized the legal approach and emphasized the company’s commitment to user privacy and security. Telegram has updated its FAQ to allow users to report illegal content, but concerns … Read more

National Public Data Says Breach Impacts 1.3 Million People

August 19, 2024 at 09:43AM National Public Data (NPD) confirms a data breach affecting 1.3 million US individuals, with 2760 from Maine. Reports suggest 2.9 billion records compromised. NPD suspects a third-party bad actor and acknowledges potential leaks. Discrepancies exist between NPD’s announcement and external reports. The full story behind the breach remains unclear. Initial … Read more

Unconfirmed Hack of 2.9 Billion Records at National Public Data Sparks Media Frenzy Amid Lawsuits

August 14, 2024 at 11:16AM National Public Data (NPD) allegedly experienced a data breach, with 2.9 billion records of US, Canada, and UK citizens being offered for sale. While media largely ignored the reports, a class-action lawsuit filed against NPD raised substantial concerns. However, there is a lack of concrete evidence, and NPD has not … Read more

Mega money, unfathomable violence pervade thriving underground doxxing scene

August 12, 2024 at 10:31AM Interviews with known doxxers reveal the lucrative nature of the practice and its increasingly violent extortion tactics. With a large audience and a leading platform, Doxbin has become a lucrative avenue, generating six figures annually by charging victims to remove their data. Doxxing involves revealing an individual’s true identity, presenting … Read more

Forget security – Google’s reCAPTCHA v2 is exploiting users for profit

July 24, 2024 at 02:42AM Google’s reCAPTCHA service, initially designed to enhance website security, is accused by researchers at the University of California, Irvine of gathering user information and labor. The researchers argue it is disliked by users, costly, and vulnerable to bots. They estimate the service has cost over $6.1 billion in human time … Read more

Russia forces Apple to remove dozens of VPN apps from App Store

July 8, 2024 at 01:42PM Apple has removed 25 VPN apps from the Russian App Store at the request of Roskomnadzor, Russia’s telecom watchdog. The order targets apps used to access content deemed illegal in Russia. Apple notified affected vendors and suggested contacting Roskomnadzor for more information. This move is part of the broader effort … Read more

Former Nuance Employee Arrested After Geisinger Data Breach Exposed 1.2 Million Records

July 8, 2024 at 09:57AM Geisinger, a Pennsylvania healthcare provider, is being sued for a data breach after a former Nuance employee accessed the personal information of 1.2 million individuals. The breached data included names, addresses, and medical record numbers, but no financial details. The former employee has been arrested, and a class action lawsuit … Read more