lemmydev2

In a bold move, Apple has published a draft ballot for commentary to GitHub to shorten Transport Layer Security (TLS) certificates down from 398 days to just 45 days by 2027. The Apple proposal will likely go up for a vote among Certification Authority Browser Forum (CA/B Forum) members in the upcoming months. Apple isn’t the first of the big players to suggest such a move. Last year, Google announced its intention to mandate 90-day … More → The post Apple’s 45-day certificate proposal: A call to action appeared first on Help Net Security.

Nokia's investigation of recent claims of a data breach found that the source code leaked on a hacker forum belongs to a third party and company and customer data has not been impacted. [...]

Intel’s faulty 13th- and 14th-gen CPUs trigger lawsuit out for blood.

North Korean threat actor BlueNoroff has been targeting crypto-related businesses with a new multi-stage malware for macOS systems. [...]

Campaigns like Silver Fox and Void Arachne are deploying the framework, using social media and messaging platforms to lure in victims.

Canada ordered ByteDance Ltd. to wind up its subsidiary TikTok Technology Canada, Inc. — though the move will not stop Canadians from using the popular Chinese-backed social video app.

Roblox Corp. introduced new rules preventing kids under 13 from accessing online games intended just for socializing and from making some kinds of virtual content, like drawing on digital chalkboards, the latest in a series of child-safety changes at the company.

Cisco has fixed a maximum severity vulnerability that allows attackers to run commands with root privileges on vulnerable Ultra-Reliable Wireless Backhaul (URWB) access points that provide connectivity for industrial wireless automation. [...]

In case today’s news cycle wasn’t shocking enough, here’s a gem from Sophos Fresh from a series of serious reports detailing its five-year battle with Chinese cyberattackers, Sophos has dropped a curious story about users of a popular infostealer-cum-RAT targeting a niche group of victims.…

Comments

INTERPOL has dismantled over 22,000 malicious IP addresses and servers linked to various cyber threats. This operation, code-named Synergia II, ran from April 1 to August 31, 2024, and was a collaborative effort between INTERPOL, private sector partners, and law enforcement agencies across 95 member countries.  The operation, which primarily targeted phishing, ransomware, and information stealers, identified approximately 30,000 suspicious IP […] The post INTERPOL Takes Down 22,000 malicious IP addresses Used for Hacking appeared first on Cyber Security News.

CTL staff Scott Rose, Oliver Borchert, and Doug Montgomery participated in the first joint O-RAN / 3GPP workshop on the standardization of zero trust architecture (ZTA) in mobile networks. Scott opened the workshop with a presentation on "NIST