IT news

borderlinecybersecurity · government-security · unknown-it-category-16

Tomb Raider: Lara Croft makes a spectacular return

Waterfalls and Velociraptors: Tomb Raider - Legacy of Atlantis feels new and looks amazing. Golem alluded to it. A hands-on from Peter Steinlechner (Tomb Raider, games)

CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk

The new BOD 26-04 requires agencies to review and update vulnerability management policies with a focus on KEV catalog entries. The post CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk appeared first on SecurityWeek.

borderlinecybersecurity · government-security · unknown-it-category-16

Interview: "Today even the most subtle facial expressions are recorded"

Lara Croft actress Alix Wilton Regan talks performance capture, physical training and the work of animators. An interview by Peter Steinlechner (Tomb Raider, Interview)

OnyxC2 Stealer Offers Cybercriminals Enterprise-Grade Theft for $250 a Month

Researchers say the OnyxC2 malware targets more than 200 applications and extensions while evading detection through encrypted payloads, DLL sideloading, and in-memory execution techniques. The post OnyxC2 Stealer Offers Cybercriminals Enterprise-Grade Theft for $250 a Month appeared first on SecurityWeek.

off-topiccybercrime · regulation · unknown-it-category-16

Cash App’s launching a phone service

Cash App's AT&T-based MVNO will offer an unlimited 5G data plan for $40 per month including taxes and fees. The new mobile service is powered by Gigs, the same firm behind the Klarna mobile service that launched last year with the same pricing and is "rolling out to select users, with broader availability planned in the coming months." Cash App also says it's planning connections to its Cash App Green rewards program and Cash App Families, its setup for managing supervised child and teen account

BleepingComputer33d06/11

Coupang hit with record $409 million data breach fine in Korea

The Personal Information Protection Commission (PIPC), South Korea's data protection regulator, has fined e-commerce giant Coupang a record 624.6 billion won (roughly $409 million) following a massive data breach affecting more than 37 million customers [...]

cybersecurity · government-security · data-protection

BleepingComputer33d06/11

CISA tells govt agencies to patch critical exploited flaws in 3 days

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced a new Binding Operational Directive, 26-04, that prioritizes security updates for Federal Civilian Executive Branch (FCEB) agencies. [...]

cybersecurity · government-security · data-protection

borderlinecybersecurity · government-security · unknown-it-category-16

(g+) Russian Politics: How the FSB cut Russia off the internet

Shutdowns have made one of the world's most online nations resort to cash, paper maps and pet cams (Russia, Internet)

off-topiccybercrime · regulation · unknown-it-category-16

I went to the woods to drink surprisingly great espresso

With summer's return, I'm again reminded of my limits as I head into the great outdoors: I can put up with a heavy, uncomfortable backpack, bug bites, mud, and even bland dehydrated food, but I will not forsake my morning brew. I've tried every imaginable coffee gadget in my half-century of camping. These range from simple drip systems when ultralight backpacking, an AeroPress when not weighing every gram, French press plungers when assisted by bicycle, and small countertop coffee makers when ad

borderlinecybersecurity · government-security · unknown-it-category-16

Advertisement: Microsoft Surface Pro at entry-level prices at Back Market

As a Windows tablet, the Microsoft Surface Pro offers compact productivity. At Back Market it is particularly affordable when professionally renewed. (Surface, technology/hardware)

borderlinecybersecurity · government-security · unknown-it-category-16

Disclosure Day: Spielberg's new Alien film already seems like yesterday

It could have been so beautiful! But unfortunately, Steven Spielberg's new UFO film seems like something he thought up decades ago and never adapted. A review by Daniel Pook (Film Review, Server)

Heise Security (DE)33d06/11

FreeBSD: Rights escalation gap with a tongue-in-cheek code name

IT researchers have also found a security hole in FreeBSD that enables privilege escalation. Name: “Bumsrakete[tm]”.

cybersecurity · government-security · data-protection

Wired Security33d06/11

Signal Alums Reveal ‘Encrypted Spaces,’ a System for Making Private Collaboration Apps

The new open-source project could serve as the basis for a future of apps with features as complex as Slack, Discord, or Google Docs—but with added protection against surveillance.

borderlineregulation · cybersecurity · unknown-it-category-16

Naxclow IoT Platform

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to impersonate devices, intercept or manipulate communications, harvest sensitive credentials at scale, or gain unauthorized access. The following versions of Naxclow IoT Platform are affected: Smart Doorbell X3 vers:all/* X Smart Home vers:all/* V720 vers:all/* ix cam vers:all/* CVSS Vendor Equipment Vulnerabilities v3 9.8 Naxclow Naxclow IoT Platform Authorization Bypass Through User-Controlled Key, Miss

Brickcom Cameras

View CSAF Summary Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to gain unauthorized access to live video feeds, retrieve sensitive visual information from affected premises, and obtain administrative control of the device. The following versions of Brickcom Cameras are affected: Brickcom Cube 3.2.3.5.6 Brickcom Dome 3.2.3.5.6 Brickcom Bullet 3.2.3.5.6 Brickcom Box 3.2.3.5.6 CVSS Vendor Equipment Vulnerabilities v3 7.7 Brickcom Brickcom Cameras Mi

Yarbo Android/iOS Mobile Application and Cloud Infrastructure

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to obtain hard-coded credentials, gain access to telemetry data, and potentially send operational commands to the robot fleet. The following versions of Yarbo Android/iOS Mobile Application and Cloud Infrastructure are affected: Yarbo Android/IOS mobile application Cloud MQTT infrastructure vers:all/* CVSS Vendor Equipment Vulnerabilities v3 9.8 Yarbo Yarbo Android/iOS Mobile Application and Cloud Infrastr

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-10520 Ivanti Sentry OS Command Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executiv

off-topiccybercrime · regulation · unknown-it-category-16

Boox’s new e-reader could replace your Kindle, Kobo, and digital notepad

The Go 6 now supports Boox’s stylus. | Image: Boox Boox has announced a new version of its smallest e-reader that expands the Go 6's functionality to now include note-taking. The new Go 6 (Gen II) sticks with a 6-inch, 300PPI E Ink screen like its predecessor but gets a bump from 2GB to 3GB of RAM and now supports Boox's InkSense Plus stylus, which can be used for sketching, annotating documents, or making handwritten notes. The Boox Go 6 (Gen II) is now available for preorder for $199.99 and is

Hackers Exploit Langflow Vulnerability for Remote Code Execution

Disclosed in March, the security defect enables unauthenticated attackers to write files to arbitrary locations on the system. The post Hackers Exploit Langflow Vulnerability for Remote Code Execution appeared first on SecurityWeek.

off-topicunknown-it-category-7 · unknown-it-category-6 · unknown-it-category-8

Netzpolitik (DE)33d06/11

Tracking, data analysis and AI: How invisible workers control football

This year's men's World Cup is also leaving less and less to chance. - Public domain-like released by unsplash.com: Fauzan SaariBehind the scenes of commercial football, tracking and the use of artificial intelligence are increasingly shaping the game - including at this year's World Cup. The basis for this is provided by data workers whose contribution to the digital value chains remains hidden.

cybercrime · regulation · unknown-it-category-16

Anthropic apologizes for invisible Claude Fable guardrails

Anthropic has apologized for stealthily throttling its new AI model, Claude Fable 5, with hidden guardrails that undermine both researchers and rivals using it to develop competing systems. The company says it is reversing course and will be more transparent about when the restrictions kick in, even if that means Fable refuses more queries. Fable is the first widely available model in Anthropic's Mythos class of AI systems, a group the company has spent months warning are too dangerous for publi

Siemens Says Desigo CC Files Flagged as Malware by Security Engines

A PowerShell script included in patch files appears to be triggering false positives by multiple security engines. The post Siemens Says Desigo CC Files Flagged as Malware by Security Engines appeared first on SecurityWeek.

borderlinecybersecurity · government-security · unknown-it-category-16

Russell T. Davies reveals: Doctor Who Christmas special was never planned

Doctor Who fans were waiting for a Christmas special. However, according to Russell T Davies, there were never any concrete plans for this. (Science Fiction, Disney)

borderlinecybersecurity · government-security · unknown-it-category-16

(g+) iCloud: From notoriously unreliable to technically extremely demanding

iCloud is a closely interlinked system of synchronization, backups, file storage and encrypted data replication. A look beneath the surface. A Deep Dive by Florian Bottke (iCloud, Apple)