Amazon agrees to $5.8 million FTC settlement over Ring privacy violations that include employees spying on customers
Female users were spied on for months using cameras in their bedrooms and bathrooms
Barracuda Networks has disclosed that hackers have been actively exploiting a severe zero-day for 8 months
Bad actors created backdoors into an undisclosed number of networks
Gigabyte shipped hundreds of models of motherboards with a hidden firmware backdoor
Cause for concern, or no big deal?
Operators of the UK's largest illegal streaming service jailed for over 30 years
The men made millions from subscribers
Hot Pixels attacks exploit power management in modern SoC and GPUs to leak data
Stealing pixels by measuring power consumption and frequency in processors
Zyxel firewalls affected by two new security flaws, patches must be installed ASAP
The critical vulnerabilities can be abused for remote code execution or DoS attacks
Microsoft and global intelligence agencies warn of Chinese state hackers infecting US critical infrastructure
China is preparing for future crises involving the US
Google reveals bug bounty program for its own Android apps like Chrome, Gmail and the search widget
The company paid $12 million to security researchers in 2022
Researchers discover brute-force attack that can bypass Android phone fingerprint locks
It doesn't work on iOS devices
Apple urges users to upgrade their devices immediately to patch three 'active' zero day exploits
The security patch was deployed using Apple's new Rapid Security Response automatic update system
Asus apologizes after bad router update causes widespread issues
A corrupted definition file resulted in network connectivity breaks
Montana has banned TikTok for everyone in the state
You won't find it on any app stores in the state as of next year
A former Apple engineer stole autonomous driving secrets and sold them to China, the DoJ says
Cupertino's Project Titan now a victim of Beijing's ruthless spying tactics?
Google's new registered domains include .zip and .mov for a more "exciting" and insecure internet
Researchers are debating how the new domains will affect web security and users' habits
Watch out for sneaky ChatGPT scams in Google Play and Apple's App Store
Most AI chatbots for mobile devices are fleeceware to be avoided
Chinese state hackers are infecting TP-Link routers with custom, malicious firmware
The ATP actors are exploiting home / SOHO routers for covert attacks
Microsoft can open and scan password-protected Zip archives in the cloud
In Redmond's cloud, no one can hear you say 'privacy'
A new bipartisan bill wants to improve cybersecurity of the US voting system
Providing some good old pentesting to those insecure voting machines
Privacy and civil rights groups warn against rapidly growing mass-surveillance network
The Fusus platform uses public and private cameras to create a real-time surveillance network
Millions of Android phones come with pre-installed malware, and there's no easy fix
A hot potato: The Google Play Store is notorious for harboring apps that contain malware, adware, or some flavor of spyware or fleeceware. A lesser-known fact is that hackers are increasingly targeting pre-installed apps for their misdeeds, and researchers are trying to raise awareness about this growing trend. Millions of affordable Android phones come with numerous pre-installed apps, and hackers only need to subvert one. However, addressing this issue is significantly more challenging than dealing with rogue apps that find their way into the Play Store.
Toyota accidentally exposed millions of customers' data for nearly a decade
Toyota apologized for the data exposure
Former Ubiquiti engineer sentenced to six years for stealing company data, attempted extortion
The "unsanctioned security drill" excuse didn't work
Microsoft fixes 38 flaws, including 3 zero-day vulnerabilities, with Patch Tuesday update
A lighter Patch Tuesday, but some rather nasty 0-day flaws exploited by cyber-criminals