A curious Microsoft employee has saved the world from a potential global meltdown as several Linux distros were found vulnerable to an XZ backdoor tracked under CVE-2024-3094 (CVSS score of 10.0).
Backdoor RSS
Microsoft has released a detailed set of FAQs and recommendations for users who are affected by the XZ Utils vulnerability which allows a threat actor to exploit SSH operations and get remote access.
The discussion about law enforcers' access to end-to-end encrypted communication reached a key milestone in Europe. A court says, essentially, that implementing such a measure would be illegal.
_medium.jpg)
A new crypto wallet information stealing Kraken botnet has been discovered by ZeroFox. The malware is able to easily bypass Windows Defender scans by simply adding itself as an exclusion.
_16_by_9_cropped_medium.jpg)
"Made on Windows 11 Alpha" themed malicious Microsoft Word documents have been discovered by the security researchers at Anomali. The maldoc implements VBA macros to deliver a JavaScript payload.
An open letter demanding that Apple halt the rollout of its photo scanning tech and issue a statement to reaffirm its commitment to privacy now has signatures from over 5,000 individuals and firms.
A new security advisory has revealed that about 3 million Android smartphones are carrying a very powerful rootkit that could allow hackers to install apps with elevated permissions.
London's top cop explained he'd want a system that allowed law enforcement officers to remotely take over and stop a car if it was deemed necessary. The idea was part of a wider conversation on IT.
The hackers that discovered a security flaw in Windows which allows attackers to bypass Secure Boot, are warning that Microsoft's current fixes are untenable and that the flaw might never get patched.
The UK's proposed Investigatory Powers Bill would make companies like Apple provide a backdoor in their products. To make things worse, the companies who do this would be subject to a gagging clause.
Linux Mint users have received an update to the mintUpdate package which will alert users if they're infected with the TSUNAMI backdoor. The backdoor can give hackers remote access to systems.
The Linux Mint founder, Clement Lefebvre, announced that a malicious ISO was hosted on the site on Saturday. Users should re-download a new ISO and reinstall their Mint installs if affected.
A new type of Facebook hoax is currently circulating on the website. People are tagged in an alleged video, which upon opening is a malware hosting website, that can infect a wide range of devices.
The US House of Representatives has pushed forward an amendment that would cut funding from the NSA's controversial backdoor searches and stop the NSA from adding backdoors to encryption standards.
A backdoor has been discovered affecting the modem of various Samsung devices, allowing remote and indiscriminate read/write/delete access to the device's storage
A US District Judge has ordered the FBI to come clean on their efforts to access encrypted information and force manufacturers to build backdoors into their products, following a lawsuit from the EFF.
Random numbers are critical for cryptography: for encryption keys, random authentication challenges, initialization vectors, nonces, key-agreement schemes, generating prime numbers and so on. Break the random-number generator, and most of the time you break the...
Windows Vista won't have a backdoor that could be used by police forces to get into encrypted files, Microsoft has stressed. In February, a BBC News story suggested that the British government...
The media has already written extensively about how Sony BMG appliedrootkit technology to hide and protect DRM components used to prevent disks from being copied. One highly unfortunate effect of Sony's decision to use this...
An interesting point raised here is the trust we have in closed source providers like Cisco and Microsoft. Although i'm not suggesting that everything should be open sourced, should we introduce some kind of mandatory...
