U.S. Charges 4 Chinese Military Hackers Over Equifax Data Breach

The United States Department of Justice today announced charges against 4 Chinese military hackers who were allegedly behind the Equifax data breach that exposed the personal and financial data of nearly 150 million Americans.

In a joint press confere… Continue reading U.S. Charges 4 Chinese Military Hackers Over Equifax Data Breach

Exfiltrating Data from Air-Gapped Computers Using Screen Brightness

It may sound creepy and unreal, but hackers can also exfiltrate sensitive data from your computer by simply changing the brightness of the screen, new cybersecurity research shared with The Hacker News revealed.

In recent years, several cybersecurity … Continue reading Exfiltrating Data from Air-Gapped Computers Using Screen Brightness

Flaw in Philips Smart Light Bulbs Exposes Your WiFi Network to Hackers

There are over a hundred potential ways hackers can ruin your life by having access to your WiFi network that’s also connected to your computers, smartphones, and other smart devices.

Whether it’s about exploiting operating system and software vulnera… Continue reading Flaw in Philips Smart Light Bulbs Exposes Your WiFi Network to Hackers

Sudo Bug Lets Non-Privileged Linux and macOS Users Run Commands as Root

Joe Vennix of Apple security has found another significant vulnerability in sudo utility that under a specific configuration could allow low privileged users or malicious programs to execute arbitrary commands with administrative (‘root’) privileges on… Continue reading Sudo Bug Lets Non-Privileged Linux and macOS Users Run Commands as Root

Microsoft Azure Flaws Could Have Let Hackers Take Over Cloud Servers

Cybersecurity researchers at Check Point today disclosed details of two recently patched potentially dangerous vulnerabilities in Microsoft Azure services that, if exploited, could have allowed hackers to target several businesses that run their web an… Continue reading Microsoft Azure Flaws Could Have Let Hackers Take Over Cloud Servers

How to Clear Data Facebook Collects About You from Other Sites and Apps

Facebook is one of the world’s biggest advertising platforms, and that’s because it knows a lot about you, me, and everyone.

Facebook uses many tools to track people across the Internet, whether they have an account with the social networking site or … Continue reading How to Clear Data Facebook Collects About You from Other Sites and Apps

From my Gartner Blog – Updated Paper on Penetration Testing and Red Teams

I finally managed to publish the update to my paper on pentesting, “Using Penetration Testing and Red Teams to Assess and Improve Security”. It has some small tweaks from the previous version, including some additional guidance around Breac… Continue reading From my Gartner Blog – Updated Paper on Penetration Testing and Red Teams

New ‘CacheOut’ Attack Leaks Data from Intel CPUs, VMs and SGX Enclave

Another month, another speculative execution vulnerability found in Intel processors.

If your computer is running any modern Intel CPU built before October 2018, it’s likely vulnerable to a newly discovered hardware issue that could allow attackers to… Continue reading New ‘CacheOut’ Attack Leaks Data from Intel CPUs, VMs and SGX Enclave