LockBit ransomware attacks port infrastructures, releases free decryptor for children's hospital
Cyber-criminals with a heart of gold or just business policy?
Security
Your privacy and rights online. Securing your systems, hacking news and more.
TechnicalSides's top security stories of 2022: Vulnerabilities wait in the wings
Staying safe online is no easy task
You should probably update your Netgear router ASAP
Two dozen security alerts in one day affecting many routers, range extenders, and Wi-Fi systems
Cyberattacks could soon become impossible to insure
In the grim dark future of cyber-warfare, there is no insurance
AI-assisted code can be inherently insecure, study finds
Programmers must be educated about strong coding practices
Researcher buys US military device containing sensitive biometric data for $68 from eBay
Don't leave memory cards in the devices you sell
New information-stealing malware is being spread by fake pirate sites
"Arrr, beware of RisePro, matey"
In a nutshell: In another showing of why downloading pirated software, games, movies, etc., can be riskier than it's worth, cybersecurity researchers have discovered a new information-stealing malware distributed through fake websites hosting pirated and other illegal content.
PSA: Reconsider your password manager options
After recent LastPass incidents, it might be time to consider other password manager options. Highly sought-after options include Bitwarden and KeePassXC, although there's a wider variety of choices that include the likes of Keeper, 1Password, Nordpass and Dashlane although not all of them are free.
LastPass breach: it's worse than initially thought
The August incident compromised some users' data, too
Madison Square Garden uses facial recognition against legal opponent
Company banned lawyers suing it from its venues, identifying them with facial recognition
The FBI advises users to install ad blockers
PSA: Ad blocking is perhaps one of the most controversial aspects of browsing the web today. Users agree that it declutters web pages, but they also deny ad revenue to many sites that need it (like TechnicalSides). However, law enforcement agencies admit that ad blocking also mitigates some security risks that online advertising introduces.
McGraw Hill breach exposed 22 terabytes of sensitive student data
Two unprotected S3 buckets contained troves of confidential information
Ransomware attacks are ongoing: a recap of major recent incidents, including this week's hit on The Guardian
What just happened? Despite IT security efforts worldwide, ransomware attacks show no sign of slowing down. Various organizations like technology manufacturers, the media, and governments have suffered major incidents this year. The latest and potentially last major attack in 2022 has struck the 201-year-old British newspaper.
Corsair says K100 keyboard's weird behavior is a bug, not a keylogger
A costly keyboard with a nasty surprise inside, or just a macro bug?
Nvidia releases security patch driver for older GeForce 600, 700 & Titan series
Nvidia has released a new driver update that addresses potential security issues for older GeForce GPUs that are no longer supported by Game Ready or Studio drivers.
Another critical, EternalBlue-like vulnerability threatens Windows machines worldwide
"Wormable" flaw could unleash the same chaos the world saw with WannaCry
Cybersecurity analysts find Fancy Bear sniffing around US satellite network
Fancier and more dangerous than a bear on drugs
Microsoft fixes Windows 11 22H2 gaming performance issues, restarts rollout
The update should reappear in Windows Update over the next few days
A ransomware gang used credentials from the Lapsus leak to sign malware
Group signed a kernel driver that disabled security software
Microsoft's Patch Tuesday squashes 49 bugs to end the year
Two zero-day and six critical vulnerabilities have been patched
Google introduces vulnerability scanner for open-source projects
A community database-backed tool for detecting dependency vulnerabilities
A clever trick turns antivirus software into unstoppable data wiping scourges
What just happened? Antivirus and anti-malware programs are supposed to be the most trusted type of software installed on a PC. Exploiting this well-known status quo, a security researcher created a data-wiping tool potentially capable of erasing all the data present on a system.
How to remove yourself from the internet
You can and should limit the data you put out there through your online activity
Europe's eIDAS 2.0: a threat to modern web security?
Revised European rules for digital certificates would be a downgrade
Cyberattack has kept an entire nation's government offline for over a month
Vanuatu's government won't say whether it was ransomware