The Lapsus$ cyber crime gang has revealed online, what Samsung has acknowledged to be nearly 200GB of Samsung internal files. Lapsus$ gang dump Samsung data online • The Register Lapsus$ has also stolen internal files from Nvidia in a separate extortion bid. More bad news for Nvidia – and advice …
Azure flaw found, reported and fixed before it was exploited… probably
AutoWarp was discovered and reported by Orca Security to Microsoft, who patched it, before its widespread exploitation. Microsoft Azure flaw allowed unauthorized account access • The Register AutoWarp would have given unauthorised access to Azure Automation Services.
Dirty Pipe – the next in what is becoming a procession of Linux vulnerabilities and this one is bad
This is a high-severity vulnerability in the Linux kernel that could allow untrusted users root access. Linux has been bitten by its most high-severity vulnerability in years | Ars Technica Linux distributions patch kernel privilege escalation flaw • The Register Dirty Pipe has been listed among the most serious Linux threats …
The new Cyber War
Joyce Hakmeh and Esther Naylor at The Guardian have written an opinion piece about the cyber security experts who have moved from a “virtual cold war” to being combatants in a “virtual hot war”. How the tech community has rallied to Ukraine’s cyber-defence | Joyce Hakmeh and Esther Naylor | …
Amazon Alexa hijacked but it is now patched – updated
This was originally posted on 4 March 2022 I put this more academic article up, as a Saturday read, for some background into home automation and smart devices: Home automation and Smart Devices – some questions to be answered – Smart Thinking Solutions Now today there is an article on …
Continue reading “Amazon Alexa hijacked but it is now patched – updated”