Antivirus and Security news

Google will pay people to use less electricity so its data centers can use more

Google has an answer to some of the electricity supply problems that data center construction is causing: It has signed an agreement with energy supplier Voltus to build what it’s calling a 1-gigawatt virtual power plant, expanding on an earlier 100 megawatt deal the two signed earlier this year. This power plant is virtual in […] more…

Hyperscalers allow more scrutiny of controversial data center plans

Hyperscalers are getting decidedly twitchy about citizens’ reactions to their secretive data center construction plans, and are looking for ways to de-escalate some of the conflicts. Earlier this month, Amazon announced its Data Center Commitment which, among other things, would disclose more information about energy and water use and consider a moratorium asking government officials […] more…

Matrix gains ground in Europe’s public sector — but replacing Teams is another matter

Matrix-based messaging tools are gaining traction among European governments that seek to gain greater control over sensitive communications data and lessen their reliance on US technology suppliers. The growing interest reflects a broader push toward open-source applications in Europe amid geopolitical uncertainty. Yet the costs and complexity of replacing established applications such as Microsoft Teams […] more…

OpenClaw creator spent $10 million on AI tokens last month

OpenClaw, the AI digital assistant, is looking to establish itself as an essential tool for users — but if it is as profligate in its use of tokens as its creator, Pete Steinberger, then users could be in for some huge usage bills. Steinberger, now working for OpenAI, spent $10 million on AI tokens there […] more…

Meta hit with $25 billion fine for illegally sharing user data

A judge in New Mexico has fined Meta $25 billion for its flouting of data privacy laws between 2010 and 2021, including its controversial passing of data to Cambridge Analytica. The action serves as a stark reminder to enterprises not to play fast and loose with data protection legislation, as the consequences could be highly […] more…

In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware

Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen, ShinyHunters negotiator probe. The post In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware appeared first on SecurityWeek. more…

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet. The post Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge appeared first on SecurityWeek. more…

SAP lets AI play key role in its certification renewal process

SAP professionals can now renew their certifications through AI-based roleplays. The new service builds on SAP’s revamp of its certification program last year, shifting the focus from rote learning of facts towards real-world use cases. “The evolution of Stay Certified reflects a broader shift already taking place across SAP Certification: moving beyond assessing what someone […] more…

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks

The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments. The post China APT Uses AI Pentest Tool Artex in ConnectWise Attacks appeared first on SecurityWeek. more…

eMudhra quits global TLS certificate market after compromise of CA signing keys

Indian digital trust company eMudhra has announced that it is exiting the global SSL/TLS certificate business and is offering customers certificates issued by Sectigo as an alternative, following the compromise of private keys behind eight of its intermediate certificate authorities. The company’s board decided “to voluntarily withdraw from the global SSL/TLS certificate business,” eMudhra said […] more…

A tiny defect in a crystal reveals a big quantum surprise

Researchers have solved a long-standing challenge in understanding how tiny defects in materials like diamond and silicon carbide behave when exposed to light. Their new computational method revealed a surprisingly important energy-loss mechanism in silicon carbide that scientists had previously underestimated. The finding helps explain a mystery that has puzzled researchers for years and could […] more…

Attackers Exploit Third Arista VCO Zero-Day in Four Months

The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges. The post Attackers Exploit Third Arista VCO Zero-Day in Four Months appeared first on SecurityWeek. more…

7 out-of-sight Googlebook highlights

Google’s new Googlebooks are packed with potential — and while the systems in their current state may be awkwardly rough around the edges, there are some truly interesting ideas within ’em. I looked at some of those highlights in my recent “Googlebook work test” hands-on analysis, but in addition to all the surface-level sorcery, Googlebooks […] more…

11 Million Impacted by Capcom Data Breach

The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts. The post 11 Million Impacted by Capcom Data Breach appeared first on SecurityWeek. more…

Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’

In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders. The post Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ appeared first on SecurityWeek. more…

LiteLLM Compromised in Fresh Supply Chain Attack

Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker. The post LiteLLM Compromised in Fresh Supply Chain Attack appeared first on SecurityWeek. more…

« Older posts