by Syndicated News Feed | Mar 18, 2025 | IT Security
US sperm donor giant California Cryobank is warning customers it suffered a data breach that exposed customers’ personal information. California Cryobank is a full-service sperm bank providing frozen donor sperm and specialized reproductive services, such as egg...
by Syndicated News Feed | Mar 18, 2025 | IT Security
The upheaval at the US government’s Cybersecurity and Infrastructure Security Agency, aka CISA, took another twist on Tuesday, as it moved to reinstate staffers it had fired over the past few weeks – specifically those still in their probationary period...
by Syndicated News Feed | Mar 18, 2025 | IT Security
A cascading supply chain attack that began with the compromise of the “reviewdog/action-setup@v1” GitHub Action is believed to have led to the recent breach of “tj-actions/changed-files” that leaked CI/CD secrets. Last week, a supply chain...
by Syndicated News Feed | Mar 18, 2025 | IT Security
An exploitation avenue found by Trend Micro has been used in an eight-year-long spying campaign, but there’s no sign of a fix from Microsoft, which apparently considers this a low priority. The attack method is low-tech but effective, relying on malicious .LNK...
by Syndicated News Feed | Mar 17, 2025 | IT Security
A trivial flaw in Apache Tomcat that allows remote code execution and access to sensitive files is said to be under attack in the wild within a week of its disclosure. The vulnerability is CVE-2025-24813, and was revealed on March 10 along with updates to close the...
by Syndicated News Feed | Mar 17, 2025 | IT Security
Image: TechCrunch (CC BY 2.0)French authorities have allowed Pavel Durov, Telegram’s CEO and founder, to temporarily leave the country while criminal activity on the messaging platform is still under investigation. Earlier today, Durov revealed in a Telegram...
by Syndicated News Feed | Mar 17, 2025 | IT Security
Microsoft says the March 2025 Windows cumulative updates automatically and mistakenly remove the AI-powered Copilot digital assistant from some Windows 10 and Windows 11 systems. The warning was added to updated support documents days after Redmond released this...
by Syndicated News Feed | Mar 17, 2025 | IT Security
A vulnerability analyst and prominent member of the infosec industry has blasted Microsoft for refusing to look at a bug report unless he submitted a video alongside a written explanation. Senior principal vulnerability analyst Will Dormann said last week he contacted...
by Syndicated News Feed | Mar 16, 2025 | IT Security
A widespread phishing campaign has targeted nearly 12,000 GitHub repositories with fake “Security Alert” issues, tricking developers into authorizing a malicious OAuth app that grants attackers full control over their accounts and code. “Security...
by Syndicated News Feed | Mar 15, 2025 | IT Security
Security researcher Yohanes Nugroho has released a decryptor for the Linux variant of Akira ransomware, which utilizes GPU power to retrieve the decryption key and unlock files for free. Nugroho developed the decryptor after being asked for help from a friend, deeming...