The Information Highway

The Information Highway

Read the latest technology news, your comprehensive source for the latest breakthroughs, trends, and innovations shaping the world of technology.

Hotmail email delivery fails after Microsoft misconfigures DNS

Microsoft

Hotmail users worldwide have problems sending emails, with messages flagged as spam or not delivered after Microsoft misconfigured the domain's DNS SPF record. 

Continue reading
  945 Hits

Apple Watch X reportedly coming with game-changing health feature

AWX

Blood pressure reading could be on the way

An innovative device called Apple Watch X could be in the works to mark the 10th generation of Apple's smartwatch division. According to a new report, the mysterious Apple Watch X looks to usher in major upgrades, including the debut of a long-rumored health sensor.

Continue reading
  1040 Hits

Major U.S. energy org targeted in QR code phishing attack

phishing-hook

A phishing campaign was observed predominantly targeting a notable energy company in the US, employing QR codes to slip malicious emails into inboxes and bypass security.

Continue reading
  946 Hits

LinkedIn accounts hacked in widespread hijacking campaign

hacker-holding-linkedin

LinkedIn is being targeted in a wave of account hacks resulting in many accounts being locked out for security reasons or ultimately hijacked by attackers. 

Continue reading
  998 Hits

Apple Watch Series 9 rumored release date, price and biggest upgrades

CjZ8FA7q7c9cgQSP5U9K2E-970-80

What to expect from Apple's next-gen smartwatch

The countdown is on to the Apple Watch Series 9. With Apple's next-gen smartwatch expected to arrive this fall, we're tracking down rumors and speculating about the improvements we'll see over the Apple Watch Series 8.

Continue reading
  1192 Hits

Knight ransomware distributed in fake Tripadvisor complaint emails

knight-check-piece

The Knight ransomware is being distributed in an ongoing spam campaign that pretends to be TripAdvisor complaints. 

Continue reading
  930 Hits

Ford says cars with WiFi vulnerability still safe to drive

ford

Ford is warning of a buffer overflow vulnerability in its SYNC3 infotainment system used in many Ford and Lincoln vehicles, which could allow remote code execution, but says that vehicle driving safety isn't impacted. 

Continue reading
  903 Hits

CISA: New Whirlpool backdoor used in Barracuda ESG hacks

Barracuda-Whirlpool

The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has discovered that the backdoor malware named 'Whirlpool' used in attacks on compromised Barracuda Email Security Gateway (ESG) devices. 

Continue reading
  802 Hits

Dell Compellent hardcoded key exposes VMware vCenter admin creds

cyber-ke_20230814-034646_1

An unfixed hardcoded encryption key flaw in Dell's Compellent Integration Tools for VMware (CITV) allows attackers to decrypt stored vCenter admin credentials and retrieve the cleartext password. 

Continue reading
  956 Hits

New BitForge cryptocurrency wallet flaws lets hackers steal crypto

bitcoin-blockchain

 Multiple zero-day vulnerabilities named 'BitForge' in the implementation of widely used cryptographic protocols like GG-18, GG-20, and Lindell 17 affected popular cryptocurrency wallet providers, including Coinbase, ZenGo, Binance, and many more.

Continue reading
  1160 Hits

AI Swipes Data By Listening to Keyboard Keystrokes with 95% Accuracy

GFz7Cb2gFsTPdcus5KvAaJ-1200-80.jpg

A team of researchers from Cornell, specifically Joshua Harrison, Ehsan Toreini and Maryam Mehrnezhad, have published a paper detailing their work in training AI to interpret keyboard input from audio alone. By recording keystrokes to train the model, they were able to predict what was typed on the keyboard with up to 95% accuracy. This accuracy only dropped to 93% when using Zoom to train the system. 

Continue reading
  860 Hits

FBI warns of scammers posing as NFT devs to steal your crypto

FBI_headpic

The FBI warned today of fraudsters posing as Non-Fungible Token (NFT) developers to prey upon NFT enthusiasts and steal their cryptocurrency and NFT assets. 

Continue reading
  785 Hits

New Microsoft Azure AD CTS feature can be abused for lateral movement

microsoft-azure-headpic

Microsoft's new Azure Active Directory Cross-Tenant Synchronization (CTS) feature, introduced in June 2023, has created a new potential attack surface that might allow threat actors to more easily spread laterally to other Azure tenants. Microsoft tenants are client organizations or sub-organizations in Azure Active Directory that are configured wi...

Continue reading
  1096 Hits

FBI, CISA, and NSA reveal top exploited vulnerabilities of 2022

Globe_map

In collaboration with CISA, the NSA, and the FBI, Five Eyes cybersecurity authorities have issued today a list of the 12 most exploited vulnerabilities throughout 2022.

Continue reading
  868 Hits

Russian hackers target govt orgs in Microsoft Teams phishing attacks

Russia__bear

 Microsoft says a hacking group tracked as APT29 and linked to Russia's Foreign Intelligence Service (SVR) targeted dozens of organizations worldwide, including government agencies, in Microsoft Teams phishing attacks.

Continue reading
  855 Hits

Over 640 Citrix servers backdoored with web shells in ongoing attacks

citrix

Hundreds of Citrix Netscaler ADC and Gateway servers have already been breached and backdoored in a series of attacks targeting a critical remote code execution (RCE) vulnerability tracked as CVE-2023-3519. 

Continue reading
  1207 Hits

Hackers exploited Salesforce zero-day in Facebook phishing attack

salesforce

Hackers exploited a zero-day vulnerability in Salesforce's email services and SMTP servers to launch a sophisticated phishing campaign targeting valuable Facebook accounts.

Continue reading
  940 Hits

Retail chain Hot Topic discloses wave of credential-stuffing attacks

data-theft

American apparel retailer Hot Topic is notifying customers about multiple cyberattacks between February 7 and June 21 that resulted in exposing sensitive information to hackers. 

Continue reading
  932 Hits

Hackers steal Signal, WhatsApp user data with fake Android chat app

Android_malware

Hackers are using a fake Android app named 'SafeChat' to infect devices with spyware malware that steals call logs, texts, and GPS locations from phones. 

Continue reading
  979 Hits

Windows 10 KB5028244 update released with 19 fixes, improved security

Windows-10-headpic

Microsoft has released the optional KB5028244 Preview cumulative update for Windows 10 22H2 with 19 fixes or changes, including an update to the Vulnerable Driver Blocklist to block BYOVD attacks.

Continue reading
  1018 Hits