security

Windows 11 Forces Microsoft Account Sign In & Removes Bypass Trick Option | TechRepublic

Posted on by Admin
Windows 11 Forces Microsoft Account Sign In & Removes Bypass Trick Option | TechRepublic

Microsoft is making it increasingly difficult to set up Windows 11 without signing into a Microsoft Account. A popular workaround that previously allowed users to bypass the mandatory login is being removed, effectively requiring an internet connection and Microsoft Account during the initial setup. Goodbye, bypass trick For years, Windows users who preferred local accounts — or simply didn’t want to link their PC to a Microsoft Account — relied on a simple command called…

Read More

North Korean Hackers Disguised as IT Workers Targeting UK, European Companies

Posted on by Admin
North Korean Hackers Disguised as IT Workers Targeting UK, European Companies

North Korean hackers who disguise themselves as IT workers are applying for work in the U.K., according to Google Threat Intelligence Group. Success in the U.S. is declining due to rising awareness of their tactics, indictments, and right-to-work verification challenges, prompting them to turn elsewhere. The attackers pose as legitimate remote workers, looking to generate revenue, access sensitive company data, or perform espionage operations through employment. Researchers observed them seeking out login credentials for job…

Read More

3 Ways the UK Government Plans to Tighten Cyber Security Rules with New Bill

Posted on by Admin
3 Ways the UK Government Plans to Tighten Cyber Security Rules with New Bill

Amid a sharp spike in ransomware attacks disrupting essential services and critical infrastructure, the U.K. government has set out the scope of its upcoming Cyber Security and Resilience Bill for the first time. It aims to patch the holes in the country’s existing cyber regulations and protect critical infrastructure from ransomware and other attack types. “The Cyber Security and Resilience Bill, will help make the UK’s digital economy one of the most secure in the…

Read More

Update VMware Tools for Windows NOW: High-Severity Flaw Lets Hackers Bypass Authentication

Posted on by Admin
Update VMware Tools for Windows NOW: High-Severity Flaw Lets Hackers Bypass Authentication

Image: Ferran Rodenas/Flickr/Creative Commons If you use VMware Tools for Windows, it is critical to update to the latest version. Broadcom, which acquired VMware for $69 billion in 2023, has issued a patch for a high-severity vulnerability that is actively being exploited by cybercriminals. The vulnerability affects VMware Tools for Windows versions 11.x.x and 12.x.x, but has been patched in version 12.5.1. Broadcom confirmed that no workarounds are available, so affected users should update immediately….

Read More

Stealthy Apache Tomcat Critical Exploit Bypasses Security Filters

Posted on by Admin
Stealthy Apache Tomcat Critical Exploit Bypasses Security Filters

Image: cynoclub/Envato Elements Apache Tomcat is under attack as cybercriminals actively exploit a recently disclosed vulnerability, enabling remote code execution (RCE). With simple HTTP requests, attackers can trigger the deserialisation of malicious data and gain control over affected systems. The vulnerability, CVE-2025-24813, was disclosed by Apache on March 10, with the first proof of concept being released on GitHub about 30 hours later, posted by user iSee857. Soon after, security firm Wallarm later saw that…

Read More

Google Acquires Startup Wiz for $32B to 'Turbocharge Improved Cloud Security’

Posted on by Admin
Google Acquires Startup Wiz for B to 'Turbocharge Improved Cloud Security’

Image: Wiz Google has announced it is acquiring cybersecurity startup Wiz for $32 billion. The acquisition is parent company Alphabet’s largest to date, more than doubling its previous record-breaking $12.5 billion purchase of Motorola Mobility in 2012. The company appears to have pursued this deal aggressively due to the growing demand for secure cloud services. The surge in generative AI has prompted tech companies to rush for cloud infrastructure, while major security incidents, such as…

Read More

Amazon's Controversial Change to Echo's Privacy Settings Takes Effect Soon

Posted on by Admin
Amazon's Controversial Change to Echo's Privacy Settings Takes Effect Soon

Image: stockcatalog/Flickr/Creative Commons Last week, Amazon sent an email to select Echo users, warning they must now consent to having their Alexa voice recordings sent to the company’s cloud for processing. The email was sent to users with the Do Not Send Voice Recordings setting enabled on their Echo speaker or smart display, which ensured their commands are processed locally on the device; however, starting March 28, this setting will no longer be available, and…

Read More

Update Your iPhone Now to Fix Safari Security Flaw

Posted on by Admin
Update Your iPhone Now to Fix Safari Security Flaw

Image: Apple’s Official YouTube Page Apple has released iOS 18.3.2, an operating system update that fixes a vulnerability in WebKit, the browser engine used by Safari to render web pages. The flaw allowed malicious code running inside the Web Content sandbox, an isolated environment for web processes designed to limit security risks, to impact other parts of the device. Apple previously fixed this vulnerability, CVE-2025-24201, with the release of iOS 17.2 back in late 2023,…

Read More

Billions of Devices at Risk of Hacking Due to Hidden Commands

Posted on by Admin
Billions of Devices at Risk of Hacking Due to Hidden Commands

Tarlogic team giving their presentation during RootedCON. Image: Tarlogic Billions of devices worldwide rely on a widely used Bluetooth-Wi-Fi chip that contains undocumented “hidden commands.” Researchers warn these commands could be exploited to manipulate memory, impersonate devices, and bypass security controls. ESP32, manufactured by a Chinese company called Espressif, is a microcontroller that enables Bluetooth and Wi-Fi connections in numerous smart devices, including smartphones, laptops, smart locks, and medical equipment. Its popularity is partly due…

Read More

Women in Cyber Security on the Rise, But Facing More Layoffs and Budget Cuts Than Men

Posted on by Admin
Women in Cyber Security on the Rise, But Facing More Layoffs and Budget Cuts Than Men

Gender diversity in cybersecurity is slowly improving but inequities continue—a new report finds that the field has 5% more women than in 2023, but that they’re more exposed to other workplace challenges than male counterparts. About 32% of women respondents said their organizations experienced security layoffs over the last year compared to just 23% of male respondents. For Women’s History Month this March, ISC2 delved deeper into data collected for its 2024 Cybersecurity Workforce Study….

Read More
1 2 3 … 18