Search results

In the third quarter, the loss of the Web3 ecosystem from hacking and fraud reached $685.5 million-59.9% more than in the same period a year earlier, according to Immunefi. Year - on — year, the number of incidents increased by 153% at once-from 36 to 76. Of the total damage for the quarter...

В библиотеке GNU C была обнаружена новая уязвимость в системе безопасности Linux, получившая название Looney Tunables ld.so динамический загрузчик, который при успешном использовании может привести к локальному повышению привилегий и позволить субъекту угрозы получить привилегии root...

Корпорация Майкрософт подробно описала новую кампанию, в ходе которой злоумышленники безуспешно пытались перейти в облачную среду через экземпляр SQL Server. "Злоумышленники изначально использовали уязвимость SQL-инъекции в приложении в среде цели", - сказали исследователи безопасности Сандерс...

Обнаружен новый обманчивый пакет, скрытый в реестре пакетов npm, в котором развертывается руткит с открытым исходным кодом под названием r77, что является первым случаем, когда мошеннический пакет предоставил функциональность руткита. Рассматриваемый пакет - это node-hide-console-windows...

Сегодня компании среднего размера и их CISO изо всех сил пытаются справиться с растущей угрозой безопасности SaaS с помощью ограниченных трудовых ресурсов и ограниченных бюджетов. Сейчас ситуация может измениться. Сосредоточив внимание на важнейших потребностях этих компаний в области...

Новые результаты выявили связи между шпионским ПО для Android под названием DragonEgg и другим сложным модульным средством наблюдения для iOS под названием LightSpy. DragonEgg, наряду с WyrmSpy (он же AndroidControl), был впервые раскрыт Lookout в июле 2023 года как разновидность вредоносного...

This time, the company is fighting phishing attacks. Is this related to previous incidents? On September 13, 2023, customers of LastPass, a popular password manager, began reporting that they almost fell victim to fraudsters. Several companies and 87 employees of the company itself were...

Firefox users have acquired another web barrier that increases privacy on the Network. Our online activities and communication are constantly monitored. Despite the association of online surveillance with advertising networks, our activity is constantly caught in commercial telecommunications...

Experts carefully hide how Microsoft's zero-day vulnerabilities are used in attacks. Microsoft has released emergency security updates for Edge, Teams, and Skype to address two zero-day vulnerabilities in open libraries used by the products. Heap buffer overflow vulnerability CVE-2023-4863...

Hackers will get their own Root access, no matter what the cost. A vulnerability called "Looney Tunables"was recently discovered in Linux. It allows local attackers to gain superuser rights, exploiting the buffer overflow flaw in the dynamic loader. ld.so GNU C libraries The GNU C Library...

The company has released updates and notified suppliers about the danger. Qualcomm warned about three zero-day vulnerabilities in the Adreno GPU and Compute DSP drivers, which hackers are actively using in attacks. The warning comes after the Google TAG and Project Zero teams informed Qualcomm...

International corporations may lose control of their data. The Oligo Security research group discovered a set of critical vulnerabilities in the open source tool for working with AI models TorchServe, which is used by tens of thousands of servers on the Internet, including servers of large...

We analyze the key points of Python 3.12. After a year of development, a significant version of the Python programming language 3.12 has been published, which will be supported for a year and a half, followed by another three and a half years of updates aimed at eliminating vulnerabilities...

Only one message leads to the theft of confidential information of companies. Researchers at Menlo Security have discovered a new phishing campaign targeting the Microsoft 365 accounts of key CEOs of organizations in the United States. As part of the campaign, cybercriminals are abusing Open...

Russia and the United States are rethinking the connection between outer space and rural areas of the country. In a world where school, business, personal life and emergency communications are increasingly carried out via mobile devices, high-speed Internet is becoming an essential need...

From plastic toys to living brain cells. Researchers from Melbourne have discovered new opportunities for 3D printing. Scientists from Monash University in Melbourne, Australia, have successfully used 3D printing to create live neural networks from rat brain cells that develop and interact with...

A promising alliance could take over the chip industry in the near future. Tenstorrent, an AI chip company, recently announced a collaboration with Samsung to build advanced next-generation chiplets based on the RISC-V architecture. Samsung has captured the attention of the entire industry...

Can AI and quantum computing work together or become rivals? In the early 1940s, the first tube computers began to solve problems that went beyond human capabilities. Massive computers were complex, specific, and generally unreliable, making them similar to modern quantum systems. Like the...

When your "merits" and "prospects" become numbers: RSSU innovations. The Russian State Social University (RSSU) is developing an experimental platform "We", which generates a social rating for Russians based on various parameters. University students were offered to register on the platform and...

Quantum dots are changing the game in nanotechnology. Mungi Bavendi, Louis Brus and Alexey Ekimov were awarded the Nobel Prize in Chemistry on Wednesday for their discovery and development of quantum dots — nanoparticles whose size determines their properties. As described by the Royal Swedish...