Firefox will support Windows 7/8 until at least 2024
Mozilla won't abandon Microsoft's tried and tested platform anytime soon
Pwn2Own 2023 contestants won more than $1 million by exploiting 27 zero-day flaws in three days
Hackers and security researchers shined during the hack fest
Hackers put the triple whammy on a Tesla Model 3, remotely accessing several features
Tesla called the exploits "annoying" but not serious
President Biden signs order limiting the use of commercial spyware
The move is in response to journalists, activists, politicians, and academics being surveilled by foreign governments
E-commerce company with hundreds of millions of users accused of distributing Android malware
Google suspends Pinduoduo's Play store app, apps on Samsung, Huawei, and other stores likely unsafe
Emotet phishing campaign masquerading as W-9 tax form
Things that are certain in life: death, taxes, and Emotet phishing operations
You should update your Netgear Orbi router now and check for more patches soon
The latest firmware fixes three recent exploits, but a fourth remains unresolved
Pwn2Own 2023 day one, all major operating systems and Tesla Model 3 hacked
Nothing can survive financially motivated hackers these days
Acropalypse screenshot bug poses a privacy risk on Android and Windows
An Android script can recover sensitive data from a cropped image - on Windows, too
YouTube channel Linus Tech Tips terminated after it was hacked to show crypto-scam videos
TechLinked has also fallen victim
What just happened? Linus Tech Tips, one of the largest and most popular technology YouTube channels on the platform, has been hacked. It was used by the hackers to show pre-recorded 'live-streaming' crypto-scam videos, featuring former Twitter CEO Jack Dorsey and Tesla CEO Elon Musk. The channel is now showing a message stating it has been shut down for violating YouTube's community guidelines, but it appears Linus' other channels are also being abused.
New Tor Browser updates Firefox and NoScript
The latest Tor Browser brings several bug fixes, a new version of NoScript, but most importantly updates to Firefox 102.9.0esr, which includes security updates and stability improvements.
Google advises Android users to take action after finding 18 zero-day vulnerabilities in popular phones
All an attacker needs is the target's phone number
TikTok faces ultimatum from Biden administration: Sell or be banned
The demand comes after more than two years of bellyaching and a ban from government devices
Bitwarden's password manager browser extension has a known exploit it hasn't addressed in five years (Update: fix coming)
PSA: Hackers can steal your username and password for a website using an embedded iframe. It's a weakness for all password managers, and most have addressed the flaw in various ways, including issuing warnings when users are on a login page with an iframe or not trusting subdomains. Bitwarden is the sole exception, having determined in 2018 that the threat was not significant enough to address.
Microsoft's Patch Tuesday for March 2023 provides security fixes for 83 bugs, 2 zero-day flaws
Russian hackers have been hard at work exploiting the latest Outlook zero-day flaws
UK intelligence agency warns of dangers posed by AI chatbots
Be careful what you reveal
Russian hackers threaten to release Stalker 2 content if demands are not met
GSC Game World has been dealing with cyberattacks since the war began
International authorities bring NetWire's malware infrastructure to a standstill
The long suspected remote access trojan was sold without question and used to spy on unsuspecting users
Hackers accessed personal data from 9 million AT&T customers
No credit card information or social security numbers exposed
FBI admits to buying location data of US citizens without a warrant
Privacy advocates are outraged, and for good reason
WhatsApp and Signal would leave the UK rather than comply with potential requirement for weakened encryption
Many say the Online Safety Bill's requirements aren't possible without removing end-to-end encryption
Hackers are targeting SonicWall devices with malware that can survive firmware updates
The UNC4540 threat means to deploy persistent malware
New 'terms of service' pretends to absolve Canadian tax agency of all hacking liability
The CRA's online portal, which all Canadians must use, allegedly has poor cybersecurity measures
The Evolution of Ransomware: How Did We Get Here?
These days, not a month goes by that we hear about a new major ransomware attack. But how did we get to this point where our data and services could be held for ransom?
