Collaborate Disseminate
Check Point observes 40K+ attack attempts in 4 hours, with government organizations under fire A critical HPE OneView flaw is now being exploited at scale, with Check Point tying mass, automated attacks to the RondoDox botnet.… Continue reading RondoDox botnet linked to large-scale exploit of critical HPE OneView bug
Owner reverse-engineered his ride, revealing authentication was never properly individualized An Estonian e-scooter owner locked out of his own ride after the manufacturer went bust did what any determined engineer might do. He reverse-engineered it, a… Continue reading Bankrupt scooter startup left one private key to rule them all
Researcher shows how anyone can access Copenhagen experience attendees’ names, videos Exclusive The Carlsberg exhibition in Copenhagen offers a bunch of fun activities, like blending your own beer, and the Danish brewer lets you relive those memories … Continue reading Probably not the best security in the world: Carlsberg wristbands spill visitor pics
This is a threat to security – and to the weekend for some unlucky netadmins Cisco finally delivered a fix for a maximum-severity bug in AsyncOS that has been under attack for at least a month.… Continue reading Cisco finally fixes max-severity bug under active attack for weeks
What’s next for Venezuela? Click on the file and see What policy wonk wouldn’t want to click on an attachment promising to unveil US plans for Venezuela? Chinese cyberspies used just such a lure to target US government agencies and policy-related organ… Continue reading Chinese spies used Maduro’s capture as a lure to phish US govt agencies
Fix landed in July, but OEM firmware updates are required If you use virtual machines, there’s reason to feel less-than-Zen about AMD’s CPUs. Computer scientists affiliated with the CISPA Helmholtz Center for Information Security in Germany have found … Continue reading Flipping one bit leaves AMD CPUs open to VM vuln
Office workers without AI experience warned to watch for prompt injection attacks – good luck with that Anthropic’s tendency to wave off prompt-injection risks is rearing its head in the company’s new Cowork productivity AI, which suffers from a Files … Continue reading Contagious Claude Code bug Anthropic ignored promptly spreads to Cowork
And it’s ‘not unique to AWS,’ researcher tells The Reg A critical misconfiguration in AWS’s CodeBuild service allowed complete takeover of the cloud provider’s own GitHub repositories and put every AWS environment in the world at risk, according to Wiz… Continue reading A simple CodeBuild flaw put every AWS environment at risk – and pwned ‘the central nervous system of the cloud’
Smart Driver pitched as safety app, but feds claim it’s a data-harvesting scheme that jacked up premiums The Federal Trade Commission has banned General Motors and subsidiary OnStar from sharing drivers’ precise location and behavior data with consumer… Continue reading US regulator tells GM to hit the brakes on customer tracking
Suspect assisting West Midlands Police over alleged theft at Walsall GP practice The UK’s West Midlands Police has released a woman on bail as part of an investigation into a data breach at a Walsall general practitioner’s (GP) surgery.… Continue reading Woman bailed as cops probe doctor’s surgery data breach