Indian crypto exchange CoinDCX confirms $44 million stolen during hack
The crypto exchange, the largest in India, said it plans to absorb the costs of the breach.
Security
New zero-day bug in Microsoft SharePoint under widespread attack
Security researchers say Microsoft customers should take immediate action to defend against the ongoing cyberattacks, and must assume they have already been compromised.
Microsoft SharePoint servers are under attack because of a major security flaw
Hackers have exploited vulnerabilities in Microsoft’s SharePoint software, placing tens of thousands of on-premises servers used by global businesses and agencies at risk. Microsoft issued an alert on Saturday disclosing that it was aware of “active attacks,” and that it was working to patch the zero-day exploit. Researchers at Eye Security first identified the vulnerability […]
UK wants to weasel out of demand for Apple encryption back door
The UK government is reportedly set to back down from its battle with Apple to obtain back door access to secure user data protected by the company’s iCloud encryption. Victory hasn’t come through the courts, or government figures changing their minds on privacy matters, but thanks to ongoing pressure from the US during the two […]
Microsoft says it will no longer use engineers in China for Department of Defense work
Following a Pro Publica report that Microsoft was using engineers in China to help maintain cloud computing systems for the U.S. Department of Defense, the company said it’s made changes to ensure this will no longer happen.
These are our favorite cyber books on hacking, espionage, crypto, surveillance, and more
These are our favorite cybersecurity books, both by fiction authors, as well as journalists and researchers.
For privacy and security, think twice before granting AI access to your personal data
AI tools are increasingly asking for gross levels of access to your personal data under the guise of needing it to work.
A surveillance vendor was caught exploiting a new SS7 attack to track people’s phone locations
The new SS7 bypass-attack tricks phone operators into disclosing a cell subscriber’s location, in some cases down to a few hundred meters.
Ring reintroduces video sharing with police
Ring has once again started letting police request footage from users. Axon, a law enforcement technology company and maker of TASER, announced in April that it’s partnering with Ring to allow customers to share “relevant video with law enforcement to help solve crimes faster and safeguard neighborhoods,” as spotted earlier by Business Insider. The move […]
Hackers are trying to steal passwords and sensitive data from users of Signal clone
The bug in the modified messaging app can expose users’ “plaintext usernames, passwords, and other sensitive data,” per GreyNoise.