Misconfigured Power Apps from Microsoft led to exposure.
Automotive startup Upstream raises $62M Series C to scale cloud-based security
Back in 2015, researchers Charlie Miller and Chris Valasek remotely hacked into a Jeep Cherokee driven by a Wired reporter, Andy Greenberg, in an attempt to warn the auto industry of potential pitfalls in their software and inspire legislation around automotive cybersecurity. It did that and more. Fiat Chrysler, which owns Jeep, ended up recalling […]
Hunters brings in $30M Series B to grow XDR security tech
With the growing volume of ransomware and supply chain security attacks, there is a need for organizations to more rapidly detect threats. It’s that opportunity that startup Hunters is looking to capitalize on as the company today announced that it has raised a $30 million Series B round led by Bessemer Venture Partners (BVP). Hunters, […]
A new NSO zero-click attack evades Apple’s iPhone security protections, says Citizen Lab
A Bahraini human rights activist’s iPhone was silently hacked earlier this year by a powerful spyware sold to nation-states, defeating new security protections that Apple designed to withstand covert compromises, say researchers at Citizen Lab. The activist, who remains in Bahrain and asked not to be named, is a member of the Bahrain Center for […]
「パスワードのない世界」は、いつ本当にやってくる？ 進化する認証技術と実用面での課題
パスワードを用いない認証の普及は古くから期待されているが、なかなか普及が進んでいない。こうしたなかマイクロソフトの次期OS「Windows 11」で高度な生体認証が導入されるなど、技術レヴェルでは徐々に浸透し始めた。一方で、アカウント復元の煩雑さや不正利用の可能性など、さまざまな課題も指摘されている。
…
Hundreds of Thousands of Realtek-based Devices Under Attack from IoT Botnet
A dangerous vulnerability in Realtek chipsets used in hundreds of thousands of smart devices from at least 65 vendors is currently under attack from a notorious DDoS botnet gang. From a report: The attacks started last week, according to a report from …
Elastic acquires build.security for security policy definition and enforcement
Less than a year after raising its $6 million seed funding round, Tel Aviv and Sunnyvale-based startup build.security is being acquired by Elastic. Financial terms of the deal are not being publicly disclosed at this time. The deal is expected to close in Elastic’s Q2 FY22, ending October 31, 2021. In an email to TechCrunch, […]
38 Million Records Were Exposed Online — Including Contact-Tracing Info
More than a thousand web apps mistakenly exposed 38 million records on the open internet, including data from a number of Covid-19 contact tracing platforms, vaccination sign-ups, job application portals, and employee databases. The data included a ran…
Gain Admin Privileges To a Windows Machine By Plugging In a Razer Mouse
An anonymous reader writes: A Razer Synapse zero-day vulnerability has been disclosed that allows you to gain Windows admin privileges simply by plugging in a Razer mouse or keyboard.
Read more of this story at Slashdot.
教師に「ボディカメラの装着」を求める米国の保守派層、その“あり得ない提案”が現実味を帯びてきた
教師にボディカメラを着用するよう求める動きが、米国の保守派層の間で広まっている。保守派たちが「実存的脅威」と非難する批判的人種理論を学校で教えさせない目的があるが、そもそも学校での監視をどこまで許すのかという根本的な問題もある。
…