US Issues Warning After Microsoft Says China Hacked Its Mail Server Program

An anonymous reader quotes a report from NBC News: The U.S. has issued an emergency warning after Microsoft said it caught China hacking into its mail and calendar server program, called Exchange. The perpetrator, Microsoft said in a blog post, is a hacker group that the company has “high confidence” is working for the Chinese government and primarily spies on American…

Hackers Exploit Websites To Give Them Excellent SEO Before Deploying Malware

schwit1 shares a report from ZDNet: Cyberattackers have turned to search engine optimization (SEO) techniques to deploy malware payloads to as many victims as possible. According to Sophos, the so-called search engine “deoptimization” method includes both SEO tricks and the abuse of human psychology to push websites that have been compromised up Google’s rankings. SEO optimization is used by webmasters to…

Hackers Release a New Jailbreak Tool For Almost Every iPhone

An iPhone hacking team has released a new jailbreak tool for almost every iPhone, including the most recent models, by using the same vulnerability that Apple last month said was under active attack by hackers. TechCrunch reports: The Unc0ver team released its latest jailbreak this weekend, and says it works on iOS 11 (iPhone 5s and later) to iOS 14.3, which…

Can ‘Ready’ Crowdfund a Raspberry Pi Cyberdeck Enclosure for Cyberpunk Enthusiasts?

There’s 29 hours left in a Kickstarter campaign to fund “an open source, Linux-based, highly modular, customizable portable computer kit that accommodates anything from a Raspberry Pi to a Ryzen x86 4×4 single-board computer and more,” writes READY!100: Reminiscent of 1980s executive portable computers, the READY! 100 is fully modern with 12 input output ports and 4 antenna ports. Perfect for…

SolarWinds’ Former CEO Blames Intern for ‘solarwinds123’ Password Leak

“Current and former top executives at SolarWinds are blaming a company intern for a critical lapse in password security that apparently went undiagnosed for years,” reports CNN. The password in question, “solarwinds123,” was discovered in 2019 on the public internet by an independent security researcher who warned the company that the leak had exposed a SolarWinds file server… It is still…

CD Projekt Ransomware Hack Severely Disrupts Work on Cyberpunk Updates

CD Projekt SA said Wednesday it will delay a promised update to the much-criticized role-playing game Cyberpunk 2077, pinning the blame for its slow progress on a recent security breach. From a report: What the Polish publisher didn’t say is that most of its employees have been locked out of their workstations for the past two weeks, according to people familiar…

Virtual computer chip tests expose flaws and protect against hackers

Using software testing techniques on computer hardware can slash development time and produce more reliable and secure computer chips Source: https://www.newscientist.com/article/2269263-virtual-computer-chip-tests-expose-flaws-and-protect-against-hackers/?utm_campaign=RSS%7CNSNS&utm_source=NSNS&utm_medium=RSS&utm_content=home…

Clubhouse Chats Are Breached, Raising Concerns Over Security

A week after popular audio chatroom app Clubhouse said it was taking steps to ensure user data couldn’t be stolen by malicious hackers or spies, at least one attacker has proven the platform’s live audio can be siphoned. From a report: An unidentified user was able to stream Clubhouse audio feeds this weekend from “multiple rooms” into their own third-party website,…

Apple Is Going To Make It Harder to Hack iPhones With Zero-Click Attacks

Apple is going to make one of the most powerful types of attacks on iPhones much harder to pull off in an upcoming update of iOS. From a report: The company quietly made a new change in the way it secures the code running in its mobile operating system. The change is in the beta version of the next iOS version,…

Microsoft Says SolarWinds Hackers Downloaded Some Azure, Exchange, and Intune Source Code

Microsoft’s security team said today it has formally completed its investigation into its SolarWinds-related breach and found no evidence that hackers abused its internal systems or official products to pivot and attack end-users and business customers. From a report: The OS maker began investigating the breach in mid-December after it was discovered that Russian-linked hackers breached software vendor SolarWinds and inserted…