Recent Entries
Tech (100)
Serving the Technologist for more than a decade. IT news, reviews, and analysis.
From Biz & IT – Ars Technica at 2021-10-22 15:27:27
More than 100,000 people have had their eyes scanned for free cryptocurrency
Worldcoin reveals "orb" scanner, aims to distribute cryptocurrency to 1 billion people.
From Biz & IT – Ars Technica at 2021-10-21 16:00:46
How hackers hijacked thousands of high-profile YouTube accounts
Spate of attacks turned creator channels into cryptocurrency scam livestreams.
From Biz & IT – Ars Technica at 2021-10-14 19:04:47
Passengers couldn’t fly after NHS vaccine passport went offline
Outage lasted approximately 4 hours, causing issues with health app.
From Biz & IT – Ars Technica at 2021-10-14 13:40:05
Verizon’s Visible cell customers hacked, unauthorized purchases seen
Visible customers left confused as hackers place orders from their accounts.
From Biz & IT – Ars Technica at 2021-10-14 13:00:52
“Hacker X”—the American who built a pro-Trump fake news empire—unmasks himself
He was hired to build a fake news op but now wants to put things right.
From Biz & IT – Ars Technica at 2021-10-07 13:46:05
US gov’t will slap contractors with civil lawsuits for hiding breaches
Civil Cyber-Fraud Initiative mandates data-breach reporting for gov't contractors.
From Biz & IT – Ars Technica at 2021-10-06 20:31:12
Twitch source code, creator earnings exposed in 125GB leak
Twitch confirms the data breach but is investigating the full extent.
From Biz & IT – Ars Technica at 2021-10-05 23:27:15
Company that routes SMS for all major US carriers was hacked for five years
Syniverse and carriers haven't revealed whether text messages were exposed.
From Biz & IT – Ars Technica at 2021-10-05 13:33:12
Facebook’s outage likely cost the company over $60 million
Configuration change cascaded down the data centers, bringing systems to a halt.
From Biz & IT – Ars Technica at 2021-10-04 21:00:34
Windows 11: The Ars Technica review
Attractive new design overshadowed by regressions and high system requirements.
From Biz & IT – Ars Technica at 2021-10-04 18:26:55
Facebook, Instagram, WhatsApp, and Oculus are down. Here’s what we know
The root cause of the worldwide outage appears to be a flubbed BGP route update.
From Biz & IT – Ars Technica at 2021-10-04 15:12:18
Researcher refuses Telegram’s bounty award, discloses auto-delete bug
Telegram took months to fix "self-destruct" message bug. Then requested silence.
From Biz & IT – Ars Technica at 2021-10-02 11:50:42
Hundreds of scam apps hit over 10 million Android devices
GriftHorse campaign used clever techniques to avoid detection in Google Play.
From Biz & IT – Ars Technica at 2021-10-01 20:26:36
California DMV gives Cruise and Waymo OK to charge for rides
But the California Public Utilities Commission still has to give its approval.
From Biz & IT – Ars Technica at 2021-10-01 14:20:28
“Wayforward Machine” provides a glimpse into the future of the web
"Imagine a future without access to knowledge..."
From Biz & IT – Ars Technica at 2021-10-01 13:32:30
Neiman Marcus data breach impacts 4.6 million customers
Users were asked to change passwords—but were not offered free credit monitoring.
From Biz & IT – Ars Technica at 2021-09-30 23:16:29
Apple forgot to sanitize the Phone Number field for lost AirTags
Another bug-bounty boondoggle leads to public disclosure before the bug is fixed.
From Biz & IT – Ars Technica at 2021-09-30 19:00:36
Intel launches its next-generation neuromorphic processor—so, what’s that again?
Intel's Loihi processors have electronics that behave a lot like neurons.
From Biz & IT – Ars Technica at 2021-09-30 14:05:29
PoC exploit released for Azure AD brute-force bug—here’s what to do
Microsoft maintains it's not a security risk but is working toward a solution.
From Biz & IT – Ars Technica at 2021-09-29 15:47:32
Russia arrests cybersecurity expert on treason charge
Ilya Sachkov is founder of Group-IB, which specializes in ransomware attack prevention.
From Biz & IT – Ars Technica at 2021-09-28 19:47:22
NBC demanded that YouTube TV bundle Peacock or lose access to NBC channels
YouTube TV could lose NBC channels when contract expires Thursday.
From Biz & IT – Ars Technica at 2021-09-28 14:00:47
Verizon will be the first customer for BrightDrop’s new electric van
The vans use GM's new Ultium battery platform and have a range of 250 miles.
From Biz & IT – Ars Technica at 2021-09-28 13:51:52
New Azure Active Directory password brute-forcing flaw has no fix
Microsoft tells researchers it's "by design." Not like it's Patch Tuesday.
From Biz & IT – Ars Technica at 2021-09-28 00:00:26
Ford picks Kentucky and Tennessee for $11.4 billion EV investment
Three battery plants and a truck factory will add 11,000 new jobs to the region.
From Biz & IT – Ars Technica at 2021-09-27 21:25:51
Researchers use Starlink satellites to pinpoint location, similar to GPS
Researchers track six satellites to get location with accuracy of eight meters.
From Biz & IT – Ars Technica at 2021-09-27 17:52:48
Film studios sue LiquidVPN for $10 million—but is it fair?
Independent movie studios are demanding $10 million in damages from LiquidVPN.
From Biz & IT – Ars Technica at 2021-09-25 11:15:04
He escaped the Dark Web’s biggest bust. Now he’s back
DeSnake apparently eluded the takedown of AlphaBay and now plans to resurrect it.
From Biz & IT – Ars Technica at 2021-09-24 19:25:21
Three iOS 0-days revealed by researcher frustrated with Apple’s bug bounty
Public disclosure comes in wake of other grumblings about Apple's bug bounty behavior.
From Biz & IT – Ars Technica at 2021-09-23 22:47:25
Exchange/Outlook autodiscover bug exposed 100,000+ email passwords
A flaw in the Autodiscover protocol can expose email passwords to third parties.
From Biz & IT – Ars Technica at 2021-09-23 16:36:47
Now the chip shortage is being exacerbated by a labor shortage
Material costs are rising too, and the shortage will continue into 2022.
From Biz & IT – Ars Technica at 2021-09-22 23:30:22
Security audit raises severe warnings on Chinese smartphone models
The audit red-flagged Xiaomi and Huawei phones but gave OnePlus a pass.
From Biz & IT – Ars Technica at 2021-09-22 14:03:33
Canadian VoIP provider hit by DDoS attack, phone calls disrupted
Threat actors asking $4.2 million from VoIP.ms to stop DDoS attack.
From Biz & IT – Ars Technica at 2021-09-22 13:27:01
Apple users warned: Clicking this attachment will take over your macOS
Internet shortcuts come with code execution capability. Latest Mac not fully patched.
From Biz & IT – Ars Technica at 2021-09-21 23:05:26
Linux Foundation says companies are desperate for open source talent
The 2021 survey shows 97% of hiring managers prioritizing FOSS professionals.
From Biz & IT – Ars Technica at 2021-09-21 21:55:58
Ransomware victims panicked while FBI secretly held REvil decryption key
Up to 1,500 companies were ensnared in the July attacks.
From Biz & IT – Ars Technica at 2021-09-21 13:37:11
$5.9 million ransomware attack on farming co-op may cause food shortage
Attack on US farming provider NEW Cooperative may disrupt the food supply chain.
From Biz & IT – Ars Technica at 2021-09-20 21:10:15
Nation-state espionage group breaches Alaska Department of Health
Fallout continues from an advanced persistent threat first detected in May 2021.
From Biz & IT – Ars Technica at 2021-09-20 13:32:41
Epik data breach impacts 15 million users, including non-customers
Scraped WHOIS data of NON-Epik customers also exposed in the 180 GB leak.
From Biz & IT – Ars Technica at 2021-09-18 12:00:37
A new app helps Iranians hide messages in plain sight
Nahoft uses encryption to turn chats into a random jumble of words.
From Biz & IT – Ars Technica at 2021-09-17 21:39:47
SpaceX Starlink will come out of beta next month, Elon Musk says
With 600,000 orders, SpaceX boosting dish production to (hopefully) meet demand.
From Biz & IT – Ars Technica at 2021-09-17 15:10:49
Cryptocurrency launchpad hit by $3 million supply chain attack
SushiSwap's MISO launchpad hacked via a malicious GitHub commit.
From Biz & IT – Ars Technica at 2021-09-17 14:39:35
Telegram emerges as new dark web for cyber criminals
Growing network of hackers sharing data leaks on encrypted messaging app.
From Biz & IT – Ars Technica at 2021-09-16 19:26:26
Office 2021 will be available for non-Microsoft 365 subscribers on October 5
New release won't get new features like the subscription versions of Office.
From Biz & IT – Ars Technica at 2021-09-15 17:40:44
Anonymous leaks gigabytes of data from Epik, web host of Gab and Parler
Hacktivists hit Epik days after defacing Texas GOP site over abortion law.
From Biz & IT – Ars Technica at 2021-09-15 16:06:38
Microsoft accounts can go passwordless, making “password123” a thing of the past
Passwordless accounts rely on MS Authenticator or a security key for login.
From Biz & IT – Ars Technica at 2021-09-14 22:12:36
Travis CI flaw exposed secrets of thousands of open source projects
Developers furious at Travis CI's "insanely embarrassing 'security bulletin.'"
From Biz & IT – Ars Technica at 2021-09-14 16:44:22
Apple fixes iMessage zero-day exploited by Pegasus spyware
Zero-click flaw has been exploited by NSO since at least February 2021.
From Biz & IT – Ars Technica at 2021-09-14 16:00:02
Security researchers at Wiz discover another major Azure vulnerability
A little-known management service handed unauthenticated attackers root access.
From Biz & IT – Ars Technica at 2021-09-09 22:51:49
Infosec researchers say Apple’s bug-bounty program needs work
Apple allegedly pays less for bugs than its competitors do—and pays more slowly.
From Biz & IT – Ars Technica at 2021-09-08 22:33:10
WhatsApp “end-to-end encrypted” messages aren’t that private after all
Millions of WhatsApp messages are reviewed by both AI and human moderators.
From Biz & IT – Ars Technica at 2021-09-07 22:15:38
ProtonMail removed “we do not keep any IP logs” from its privacy policy
Swiss courts compelled it to log and disclose a user's IP and browser fingerprint.
From Biz & IT – Ars Technica at 2021-09-07 13:44:56
Microsoft Outlook shows real person’s contact info for IDN phishing emails
IDN homograph attacks were a problem to begin with. Outlook just made 'em worse.
From Biz & IT – Ars Technica at 2021-09-05 12:00:47
Why ransomware hackers love a holiday weekend
Looking forward to Labor Day? So are ruthless gangs of cybercriminals.
From Biz & IT – Ars Technica at 2021-09-02 23:45:35
A brief overview of IBM’s new 7 nm Telum mainframe CPU
A typical Telum-powered mainframe offers 256 cores at a base clock of 5+GHz.
From Biz & IT – Ars Technica at 2021-09-02 15:20:39
NPM package with 3 million weekly downloads had a severe vulnerability
Untrusted JavaScript config file can execute arbitrary code.
From Biz & IT – Ars Technica at 2021-08-31 14:00:27
Windows 11 arrives on October 5, Android apps will come later
Phased rollout will see all compatible PCs updated by "mid-2022."
From Biz & IT – Ars Technica at 2021-08-30 23:47:13
Coinbase erroneously reported 2FA changes to 125,000 customers
The unexpected 2FA notifications led some customers to panic sell everything.
From Biz & IT – Ars Technica at 2021-08-30 22:24:32
Not enough backup power: AT&T and T-Mobile suffer big outages in Louisiana
AT&T and T-Mobile struggle while Verizon says its "network remains resilient."
From Biz & IT – Ars Technica at 2021-08-29 11:05:25
A bad solar storm could cause an “Internet apocalypse”
Undersea cables would be hit especially hard by a coronal mass ejection.
From Biz & IT – Ars Technica at 2021-08-27 22:00:37
“Worst cloud vulnerability you can imagine” discovered in Microsoft Azure
30% of Cosmos DB customers were notified—more are likely impacted.
From Biz & IT – Ars Technica at 2021-08-26 17:07:00
Need to get root on a Windows box? Plug in a Razer gaming mouse
Razer's automatically downloaded installer exposes a SYSTEM shell to any user.
From Biz & IT – Ars Technica at 2021-08-25 19:39:29
Nude hunt: LA phisherman accessed 4,700 iCloud accounts, 620K photos
The attacker seems to have relied on social engineering to hoodwink his victims.
From Biz & IT – Ars Technica at 2021-08-24 20:32:56
President Biden to host infosec roundtable with tech giant CEOs
2021 is a great year for the red teams of the world—blue teams, not so much.
From Biz & IT – Ars Technica at 2021-08-24 15:11:31
38 million records exposed online—including contact-tracing info
Misconfigured Power Apps from Microsoft led to exposure.
From Biz & IT – Ars Technica at 2021-08-22 12:00:42
Looking for a new job in tech? It may be your lucky day
Employers are turning on the charm to attract engineers and developers to their firms.
From Biz & IT – Ars Technica at 2021-08-21 11:55:11
Now that machines can learn, can they unlearn?
Researchers see if they can remove sensitive data without retraining AI from scratch.
From Biz & IT – Ars Technica at 2021-08-18 19:43:48
Hackers who breached T-Mobile stole personal data for ~49 million accounts
PII includes first and last names, dates of birth, SSNs, and driver’s license numbers.
From Biz & IT – Ars Technica at 2021-08-17 21:29:56
iPhone keyboard for blind to shut down as maker cites Apple “abuse” of developers
Apple falsely claimed that FlickType broke "full access" rule, developer says.
From Biz & IT – Ars Technica at 2021-08-17 20:07:55
WhatsApp shuts down Taliban helpline in Kabul
It's meant to act as emergency hotline for civilians to report violence and looting.
From Biz & IT – Ars Technica at 2021-08-17 02:15:11
T-Mobile has been hacked yet again—but still doesn’t know what was taken
Data reportedly includes SSNs, driver license numbers, and more for 100 million people.
From Biz & IT – Ars Technica at 2021-08-16 20:26:29
Hospitals hamstrung by ransomware are turning away patients
The ransomware epidemic continues to grow.
From Biz & IT – Ars Technica at 2021-08-15 11:44:54
Samsung has its own AI-designed chip. Soon, others will too
Semiconductor software-design maker Synopsys is adding AI to its arsenal.
From Biz & IT – Ars Technica at 2021-08-14 11:30:27
A simple software fix could limit location data sharing
With Pretty Good Phone Privacy, carriers wouldn't always know where you are.
From Biz & IT – Ars Technica at 2021-08-13 12:15:55
Excerpt: How Google bought Android—according to folks in the room
Enjoy a sneak peek from Androids: The team that built the Android operating system.
From Biz & IT – Ars Technica at 2021-08-11 22:30:23
Leaked voting machine BIOS passwords implicate Q-friendly county clerk
Leaked BIOS passwords led investigators to Tina Peters' office in Mesa County, Colo.
From Biz & IT – Ars Technica at 2021-08-11 21:06:22
Hackers siphon $600 million in digital tokens, crypto network says
Poly Network breach would be among biggest heists to target cryptocurrency industry.
From Biz & IT – Ars Technica at 2021-08-11 18:53:59
AT&T delays 500,000 fiber-to-the-home builds due to severe fiber shortage
AT&T planned to wire up 3 million homes this year, will hit 2.5 million instead.
From Biz & IT – Ars Technica at 2021-08-09 14:00:41
New “Glowworm attack” recovers audio from devices’ power LEDs
A new class of passive TEMPEST attack converts LED output into intelligible audio.
From Biz & IT – Ars Technica at 2021-08-06 11:15:23
Paragon is working to get its ntfs3 filesystem into the Linux kernel
Torvalds seems bullish on getting Paragon's project across the line eventually.
From Biz & IT – Ars Technica at 2021-08-06 00:29:38
Apple explains how iPhones will scan photos for child-sexual-abuse images
Apple offers technical details, claims 1-in-1 trillion chance of false positives.
From Biz & IT – Ars Technica at 2021-08-05 19:35:08
Apple plans to scan US iPhones for child abuse imagery
Security researchers raise alarm over potential surveillance of personal devices.
From Biz & IT – Ars Technica at 2021-08-05 18:22:39
SpaceX previews ruggedized Starlink dish for vehicles, ships, and aircraft
Dish built for extreme heat and cold with "improved snow/ice melt capabilities."
From Biz & IT – Ars Technica at 2021-08-05 11:45:04
Critical Cobalt Strike bug leaves botnet servers vulnerable to takedown
New exploit available for download lets hackers crash Cobalt Strike Team Servers.
From Biz & IT – Ars Technica at 2021-08-04 19:36:39
CenturyLink selling copper network in 20 states instead of installing fiber
Private-equity firm Apollo will take on 1.3 million CenturyLink Internet users.
From Biz & IT – Ars Technica at 2021-08-04 02:17:45
The State Department and 3 other US agencies earn a D for cybersecurity
Two years after a damning cybersecurity report, auditors find little has improved.
From Biz & IT – Ars Technica at 2021-08-03 17:10:34
Awful transaction and timing: AT&T finally ditches DirecTV
AT&T owns 70% of DirecTV spinoff but won't be managing it anymore.
From Biz & IT – Ars Technica at 2021-08-03 14:32:43
Trusted platform module security defeated in 30 minutes, no soldering required
Sometimes, locking down a laptop with the latest defenses isn't enough.
From Biz & IT – Ars Technica at 2021-08-03 01:39:55
New WireGuardNT shatters throughput ceilings on Windows
Adventurous users can try the new implementation now by adding a registry key.
From Biz & IT – Ars Technica at 2021-07-31 16:46:32
With help from Google, impersonated Brave.com website pushes malware
With a valid TLS certificate, faux Bravė.com could fool even security-savvy people.
From Biz & IT – Ars Technica at 2021-07-30 12:54:48
Software downloaded 30,000 times from PyPI ransacked developers’ machines
Expect to see more of these "Frankenstein" malware packages, researchers warn.
From Biz & IT – Ars Technica at 2021-07-30 12:30:30
New bank-fraud malware called Vultur infects thousands of devices
Screen sharing courtesy of VNC mirrors device screens to attacker-controlled servers.
From Biz & IT – Ars Technica at 2021-07-29 12:00:27
Feds list the top 30 most exploited vulnerabilities. Many are years old
Hackers continue to exploit publicly known—and often dated—software vulnerabilities.
From Biz & IT – Ars Technica at 2021-07-28 19:28:14
Biden warns cyber attacks could lead to a “real shooting war”
US president's remarks follow breaches that paralyzed critical services.
From Biz & IT – Ars Technica at 2021-07-28 12:42:10
July has already brought us 2 new ransomware groups hunting for big game
The additions come as the number of high-severity ransomware attacks ratchet up.
From Biz & IT – Ars Technica at 2021-07-26 23:44:38
VPN servers seized by Ukrainian authorities weren’t encrypted
Company says it's in the process of overhauling its VPN offerings to better secure them.
From Biz & IT – Ars Technica at 2021-07-26 22:21:53
UK worries Starlink and OneWeb may interfere with each other, plans new rules
Ofcom says complexity of giant satellite networks raises interference concerns.
From Biz & IT – Ars Technica at 2021-07-26 15:48:20
Sean Gallagher and an AI expert break down our crazy machine-learning adventure
Join our headline experiment post-mortem on Wednesday, July 28, at 1 pm Eastern time!
From Biz & IT – Ars Technica at 2021-07-25 11:50:40
Venmo gets more private—but it’s still not fully safe
Until it offers privacy by default, it remains a liability for many of its users.
From Biz & IT – Ars Technica at 2021-07-24 10:30:23
An explosive spyware report shows limits of iOS, Android security
Amnesty International sheds alarming light on an NSO Group surveillance tool.
From Biz & IT – Ars Technica at 2021-07-22 21:12:17
Kaseya gets master decryptor to help customers still suffering from REvil attack
REvil ransomware struck as many as 1,500 networks, but a master key is now available.