Investigations
Fake Proton and Amnezia are still on the Chrome Web Store
Kush Pandya found 274 Chrome extensions wearing other people's VPN brands. They set a SOCKS5 hop on port 1082 for a shop called Myxa.
Security
Everything netsec
zero-day
The Patch Wave: Eleven Breaches, One Week, and the Myth of the AI Collapse
A single week saw Linux, Windows, macOS, Next.js, and the global software supply chain battered by critical exploits and mass advisories. Is this the long-feared AI-driven collapse of digital infrastructure, or just the new normal? A technical, evidence-driven investigation.
Linux
Copy Fail: 732 bytes to root on almost every Linux server since 2017
A subtle 2017 optimisation in the Linux kernel's crypto layer has just been turned into a reliable, 732-byte path from any user account to root. Here's what it means for your servers and what to do right now.
Security
Cloudflare launches 1.1.1.1, a fast privacy-first DNS service
DNS is the system that converts websites' domain names (e.g. google.com) to an IP address. But not all public DNS servers are created equal. Right now, you're most certainly using your ISP's default DNS. But it may be slow, vulnerable to attacks or
Security
SpiderOak Semaphor 2.0 is the Slack alternative you've been waiting for
Group chat is now the backbone of millions of businesses - from small teams to Fortune 500 enterprises -. The first service that comes to mind is Slack, the one that started it all. But Slack is not perfect: the app is well-known for using too much RAM and making your
News
8tracks music service breached, millions of passwords stolen
8tracks internet radio and playlist service has been hit by an attack where over 18 million accounts' email and passwords have been stolen. Only users who signed up with their email as a mode of login have their password in the database. If you signed up to 8tracks via
Security
All-in-one Network management app NetX Pro free today on Google Play
NetGEL has made the NetX Pro app free today on Google Play. > NetX PRO - Android Apps on Google Play [https://play.google.com/store/apps/details?id=com.tools.netgel.netxpro] Discovers and manages all devices connected to the network WiFi/Mobile This feature-rich app allows you to
Security
HumbleBundle Cybersecurity book bundle
HumbleBundle is widely known in gamer communities for its Pay What You Want bundles, with several levels of perks according to the price you pay. But HumbleBundle is not limited to games and game-related offers. Indeed, in the latest book bundle, you'll find interesting reads if you
News
Personal Details and Political Bias of 198 Million US Citizens Leaked
The data was left exposed to the view of everyone by Deep Root Analytics, a contractor used by the Republican Party. This is not a case of hacking, but rather misconfiguration. All those records were kept in an unprotected Amazon S3 bucket. What is the data? The data exposed included
Vulnerability
Compromised in Translation - How Hackers Can Take Control of Your PCs with Subtitles
Researchers from the Israel-based Check Point Software Technologies [https://www.checkpoint.com] discovered a new vector of attack that puts at risk hundreds of millions users of the most popular media players, including VLC [http://www.videolan.org], Kodi [https://kodi.tv] (formerly XBMC), Popcorn Time, and Stremio [https:
Virus
WannaCry Ransomware Impacts Over 100 Countries + Decryption Tool
(UPDATE : New Decryption Tool [https://github.com/gentilkiwi/wanakiwi/releases] should work on any Windows from XP to 7, provided you don't restart your PC.) WannaCry - also called Wana Cryptor 2.0 - has impacted over 100 countries. This ransomware is not the first of its kind, but its
Virus
Avira Announces Avira Prime, a VPN and Antivirus Subscription
Avira, the German antivirus company, now offers all its services in one unified subscription: Avira Prime [https://www.avira.com/en/avira-prime] For a monthly fee - 9.95€ for 5 devices or 12.99€ for 25 devices - you can access all the premium apps from Avira. This includes Avira